CVE-2025-9278CWE-400

ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

High · published January 20, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
41.3
In the wild
Unconfirmed
What it is

⚡ Running a Burp Suite active scan can knock ArmorStart® LT offline, leaving your web application as unreachable as a blocked highway! 🚧 Think of it like a restaurant that suddenly loses internet access after a health inspection — the kitchen may still be running, but no one can place orders! This denial-of-service condition could leave your web application completely inaccessible, disrupting critical services and frustrating users. In a digital world, losing connectivity is not just inconvenient; it could lead to significant downtime and loss of revenue.

Put simply

Think of it like a restaurant that suddenly loses internet access after a health inspection — the kitchen may still be running, but no one can place orders! This security issue in ArmorStart® LT causes the device to lose ICMP connectivity during a Burp Suite active scan, resulting in a denial-of-service condition where the web application becomes unreachable.

What to do

This denial-of-service condition could leave your web application completely inaccessible, disrupting critical services and frustrating users. In a digital world, losing connectivity is not just inconvenient; it could lead to significant downtime and loss of revenue. To mitigate this, ensure you apply any available firmware updates from the manufacturer. Limit the exposure of your ArmorStart® LT device to active scans, and consider enabling network traffic monitoring to detect potential disruptions early. 🛡️ You’ve got this! With some quick fixes, you can keep your web application safe and sound. 💪✨

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00492 · 41.3th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-01-20T13:55Z
EPSS history
Timeline
  • 20 JAN 13:55Z
    ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
    cvelistv5