CVE-2024-5949— Deep Sea Electronics DSE855 安全漏洞

Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of multipart boundaries. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-23171.

N/A

不可达退出条件的循环(无限循环)

Deep Sea Electronics DSE855 安全漏洞

Deep Sea Electronics DSE855是英国Deep Sea Electronics公司的一个 USB 转以太网的通信设备。 Deep Sea Electronics DSE855 存在安全漏洞，该漏洞源于多部分边界的处理中存在特定缺陷，可能导致无限循环的逻辑错误，攻击者利用该漏洞可能在系统上创建拒绝服务条件。

N/A

N/A