Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-41724

Sauter: Crash via Incomplete SOAP Request

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Sauter
Products
Ey-modulo 5 Devices Modulo 6 Devices Wscserver
CVE-2024-29155

Denial of service on Microchip RN4870 devices

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microchip
Products
Rn4870