CVE-2024-3051CWE-248CWE-419

Z/IP Gateway Device Reset Locally Denial of Service Vulnerability

High · published April 26, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00476 · 40.1th percentile
Weaknesses
CWE-248 · Uncaught Exception; CWE-419 · Unprotected Primary Channel
Published
2024-04-26T21:26Z
EPSS history
Timeline
  • 26 APR 21:26Z
    Z/IP Gateway Device Reset Locally Denial of Service Vulnerability
    cvelistv5