PT-2024-32885 · Contemporary Control System · Basrouter Bacnet Basrt-B

Iszzzz + 1 · Published 2024-05-11 · Updated 2024-05-17 · CVE-2024-4791

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Contemporary Control System BASrouter BACnet BASRT-B version 2.7.2

Description A critical vulnerability was found in the Application Protocol Data Unit component, which can be exploited remotely, leading to denial of service. The exploit has been disclosed to the public.

Recommendations For version 2.7.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2024-4791

Affected Products

Basrouter Bacnet Basrt-B

References · 8

• 🔥❌ https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT-B_2_CVE_apply.pdf · Exploit, Deleted
• 🔥❌ https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASER-B_APDU.pcapng · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2024-4791 · Security Note
• https://vuldb.com/?id.263890 · Note
• https://vuldb.com/?ctiid.263890 · Note
• https://vuldb.com/?submit.323630 · Note
• https://twitter.com/rodtrent/status/1789988668624510998 · Twitter Post
• https://twitter.com/CVEnew/status/1789476192724152518 · Twitter Post