CVE-2024-23930CWE-404

Pioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional Conditions

Medium · published January 31, 2025

CVSS v3.1
4.3
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the Media service, which listens on TCP port 42000 by default. The issue results from improper handling of error conditions. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2025-01-31T00:01Z
EPSS history
Timeline
  • 31 JAN 00:01Z
    Pioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional Conditions
    cvelistv5