Lucene search

K
cve[email protected]CVE-2024-1185
HistoryFeb 02, 2024 - 4:15 p.m.

CVE-2024-1185

2024-02-0216:15:53
CWE-404
web.nvd.nist.gov
9
cve-2024-1185
nsasoft nbmonitor
network bandwidth monitor
denial of service
local exploit
vdb-252675
nvd
security vulnerability

1.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. This affects an unknown part of the component Registration Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252675. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Vulners
NVD
Node
nsasoftnetwork_bandwidth_monitorMatch1.6.5.0
VendorProductVersionCPE
nsasoftnetwork_bandwidth_monitor1.6.5.0cpe:2.3:a:nsasoft:network_bandwidth_monitor:1.6.5.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Nsasoft",
    "product": "NBMonitor Network Bandwidth Monitor",
    "versions": [
      {
        "version": "1.6.5.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Registration Handler"
    ]
  }
]

1.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2024-1185