CVE-2024-36251CWE-125

The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash

High · published November 26, 2024

CVSS v3.1
7.5
EPSS
3%
Percentile
89.1
In the wild
Unconfirmed
What it is

The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03498 · 89.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-11-26T07:38Z
EPSS history
Timeline
  • 26 NOV 07:38Z
    The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash
    cvelistv5