RaspAP WebGUI Vulnerability Allows Remote Denial of Service Attacks
CVE-2024-28754

7.5HIGH

Key Information:

Vendor

RaspAP

Status
Raspap
Vendor
CVE Published:
9 March 2024

What is CVE-2024-28754?

RaspAP, through version 3.0.9, is vulnerable to a remote denial of service attack that can lead to 'bricking' of the device. Attackers can exploit this vulnerability by sending a specially crafted request, which may cause the affected system to become unresponsive. This persistent denial of service puts the affected installation at risk, affecting its functionality and accessibility.

References

https://dustri.org/b/carrot-disclosure.html

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.