Vulnerability · Published Oct 1, 2023 · Assigned by VulDB

CVE-2023-5324eeroOS Ethernet Interface denial of service

Medium 4.3

In plain English

A medium-severity security flaw in eeroOS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.9%top 40.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interface. The manipulation leads to denial of service. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241024.

Affected products (as reported)

Vendor	Product	Versions
n/a	eeroOS	6.16.4-11

Weakness: CWE-404 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

https://vuldb.com/?id.241024 vdb-entry, technical-description
https://vuldb.com/?ctiid.241024 signature, permissions-required
https://github.com/nomis/eero-zero-length-ipv6-options-header-dos exploit