PT-2021-20335
CVE-2021-33822
·
تاريخ النشر
2021-06-18
·
تاريخ التحديث
2021-06-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
4GEE ROUTER HH70VB version HH70 E1 02.00 22
Description:
An issue allows attackers to send incomplete HTTP requests using tools like slowhttptest, causing the server to wait for the packet to finish the connection until its resources are exhausted, resulting in a denial-of-service.
Recommendations:
For version HH70 E1 02.00 22, consider restricting access to the web server or implementing rate limiting to minimize the risk of exploitation. As a temporary workaround, restrict the use of HTTP requests that can cause the server to wait indefinitely for a packet to finish the connection.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾