CVE-2024-42392

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42392

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

mproper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters.

References
Link Resource
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42392 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
History

19 Nov 2024, 17:55

Type Values Removed Values Added
CPE cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 4.0 		v2 : unknown
v3 : 7.5
References () https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42392 - () https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42392 - Third Party Advisory
CWE NVD-CWE-Other
First Time Cesanta
Cesanta mongoose

18 Nov 2024, 17:11

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de neutralización incorrecta de delimitadores en Cesanta Mongoose Web Server v7.14 permite desencadenar un error de bucle infinito si la cadena de entrada contiene caracteres inesperados.

18 Nov 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-18 10:15

Updated : 2024-11-19 17:55

NVD link : CVE-2024-42392

Mitre link : CVE-2024-42392

CVE.ORG link : CVE-2024-42392

JSON object : View

Products Affected

cesanta

CWE
NVD-CWE-Other CWE-140

Improper Neutralization of Delimiters