CVE-2024-4791 - Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service

Back Back to CVE browser

HIGH

Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service

Published May 12, 2024

8.7

HIGH

CVSS 4.0

EPSS 1.27%

Description

A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263890 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Contemporary Control System Product BASrouter BACnet BASRT-B Default
n/a
- Version
  2.7.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Contemporary Control System

BASrouter BACnet BASRT-B

n/a

Version	Status	Constraints
2.7.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-44384
Advisory
https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASER-B_APDU.pcapng
broken-linkexploit
https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT-B_2_CVE_apply.pdf
broken-link
https://vuldb.com/?ctiid.263890
signaturepermissions-required
https://vuldb.com/?id.263890
vdb-entry
https://vuldb.com/?submit.323630
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-44384		Advisory
https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASER-B_APDU.pcapng		broken-linkexploit
https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT-B_2_CVE_apply.pdf		broken-link
https://vuldb.com/?ctiid.263890		signaturepermissions-required
https://vuldb.com/?id.263890		vdb-entry
https://vuldb.com/?submit.323630		third-party-advisory