CVE-2024-8892 — Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+

CVE-2024-8892

Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+ PUBLISHED

Description (CNA)

Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, without authentication by sending packets through the UDP protocol and port 2000, deconfiguring the device and thus disabling its use. This equipment is at the end of its useful life cycle.

Affected (CNA)

Vendor / product	Versions
CIRCUTOR / CIRCUTOR TCP2RS+	affected 1.3b

CWE

CWE-400

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.