| 标题 | Contemporary Control Systems, Inc BASRT-B 2.7.2 Denial of Service |
|---|
| 描述 | This report uncovers a critical Denial of Service (DoS) vulnerability present in the BASRT-B BACnet router, manufactured by Contemporary Control Systems, Inc. Despite official documentation stating that the "Device-Communication-Control" service is unsupported, our investigation revealed that the device responds to commands for this service without password protection. Exploiting this vulnerability permits any user to suspend all communications on the device, potentially causing disruption across the entire BACnet network, thereby affecting crucial infrastructure operations. |
|---|
| 来源 | ⚠️ https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT_CVE_apply.pdf |
|---|
| 用户 | isZzzzz (UID 64489) |
|---|
| 提交 | 2024-04-21 15時47分 (2 年前) |
|---|
| 管理 | 2024-04-27 08時03分 (6 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 262224 [Contemporary Controls BASrouter BACnet BASRT-B 2.7.2 Device-Communication-Control Service 拒绝服务] |
|---|
| 积分 | 0 |
|---|