| 标题 | Contemporary Control Systems, Inc BASRT-B Firmware Revision: 2.7.2 Denial of Service |
|---|
| 描述 | This report uncovers a critical Denial of Service (DoS) vulnerability present in the BASRT-B BACnet router, manufactured by Contemporary Control Systems, Inc. Despite official documentation stating that the "Device-Communication-Control" service is unsupported, our investigation revealed that the device responds to commands for this service without password protection. Exploiting this vulnerability permits any user to suspend all communications on the device, potentially causing disruption across the entire BACnet network, thereby affecting crucial infrastructure operations. |
|---|
| 来源 | ⚠️ https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT_CVE_apply.pdf |
|---|
| 用户 | isZzzzz (UID 64489) |
|---|
| 提交 | 2024-04-21 15時00分 (2 年前) |
|---|
| 管理 | 2024-04-27 08時02分 (6 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 262224 [Contemporary Controls BASrouter BACnet BASRT-B 2.7.2 Device-Communication-Control Service 拒绝服务] |
|---|
| 积分 | 20 |
|---|