| tiêu đề | Contemporary Control Systems, Inc BASRT-B Firmware Revision: 2.7.2 Denial of Service |
|---|
| Mô tả | This report uncovers a critical Denial of Service (DoS) vulnerability present in the BASRT-B BACnet router, manufactured by Contemporary Control Systems, Inc. Despite official documentation stating that the "Device-Communication-Control" service is unsupported, our investigation revealed that the device responds to commands for this service without password protection. Exploiting this vulnerability permits any user to suspend all communications on the device, potentially causing disruption across the entire BACnet network, thereby affecting crucial infrastructure operations. |
|---|
| Nguồn | ⚠️ https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT_CVE_apply.pdf |
|---|
| Người dùng | isZzzzz (UID 64489) |
|---|
| Đệ trình | 21/04/2024 15:00 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 27/04/2024 08:02 (6 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 262224 [Contemporary Controls BASrouter BACnet BASRT-B 2.7.2 Device-Communication-Control Service Từ chối dịch vụ] |
|---|
| điểm | 20 |
|---|