CVE-2023-50707CWE-400

Uncontrolled Resource Consumption in EFACEC BCU 500

Critical · published December 19, 2023

CVSS v3.1
9.6
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

🚨 Just one crafty request from an active user session can trigger a complete denial-of-service on your device! 🔥 Imagine your coffee shop is packed, and one customer starts asking for endless refills, causing the barista to be overwhelmed and serve no one else. This vulnerability works similarly, allowing an attacker to flood a device with requests, leaving it unable to serve legitimate users. If targeted, your device could be rendered completely unavailable, impacting users who genuinely rely on it for services. The result? Frustration, downtime, and potential loss of revenue. This is absolutely devastating for any operation that depends on consistent device performance!

Put simply

Imagine your coffee shop is packed, and one customer starts asking for endless refills, causing the barista to be overwhelmed and serve no one else. This vulnerability works similarly, allowing an attacker to flood a device with requests, leaving it unable to serve legitimate users. This vulnerability allows attackers to exploit active user sessions by sending custom requests that overwhelm the device, resulting in a denial-of-service condition. When enough requests flood in, the device simply can't keep up, leading to service outages.

What to do

If targeted, your device could be rendered completely unavailable, impacting users who genuinely rely on it for services. The result? Frustration, downtime, and potential loss of revenue. This is absolutely devastating for any operation that depends on consistent device performance! To mitigate this, ensure that your device’s software is updated to the latest version and implement rate limiting on your request-handling routines. Additionally, monitor user sessions and set strict limits on the number of requests per session. You've got this! By taking these steps, you'll bolster your defenses and keep your services running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00699 · 52.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-12-19T23:18Z
EPSS history
Timeline
  • 19 DEC 23:18Z
    Uncontrolled Resource Consumption in EFACEC BCU 500
    cvelistv5