CVE-2021-25909

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan Uncontrolled Resource Consumption pada zivautomation 4cct-ea6-334126bf firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919.

Rincian

Terbit di NVD

29 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-denial-service-attack advisory pihak ketiga