CVE-2024-4791

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263890 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-479107.2An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5. A SonarQube user with the Administrator role can mod CVE-2024-479117.2In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint CVE-2024-479128.2A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an u CVE-2024-479135.3An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2.CVE-2024-479144.5VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)CVE-2024-479157.5VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CVE-2024-479167.5Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2024-479177.5CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-479186.1Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)CVE-2024-479199.8Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CVE-2024-47928.8A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. This issue affects some CVE-2024-479207.5Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')