CVE-2023-4452CWE-120
Web Server Buffer Overflow Vulnerability
Medium · published November 1, 2023
What it is
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00449 · 38.0th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2023-11-01T14:24Z
EPSS history
Timeline