Critical Buffer Overflow Vulnerability Affects Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4

CVE-2024-4511
6.3MEDIUM

Key Information

Vendor
Shanghai Sunfull Automation
Status
Bacnet Server Hmi1002-arm
Vendor
CVE Published:
6 May 2024

Summary

A vulnerability classified as critical has been found in Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4. This affects an unknown part of the component Message Handler. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263115. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Version(s)

BACnet Server HMI1002-ARM = 2.0.4

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • VulDB entry last update

  • Vulnerability Reserved.

  • VulDB entry created

  • Advisory disclosed

Collectors

NVD DatabaseMitre Database

Credit

isZzzzz (VulDB User)
.