CVE-2023-44321CWE-400

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated…

Medium · published November 14, 2023

CVSS v4.0
5.1
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.01001 · 62.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-11-14T11:04Z
EPSS history
Timeline
  • 14 NOV 11:04Z
    Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated…
    cvelistv5