CVE-2023-5324

low-risk

Published 2023-10-01

A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interface. The manipulation leads to denial of service. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241024.

Do I need to act?

0.06% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Eeroos

Affected Vendors

Eero

References (6)

Third Party Advisory https://github.com/nomis/eero-zero-length-ipv6-options-header-dos

Permissions Required https://vuldb.com/?ctiid.241024

Third Party Advisory https://vuldb.com/?id.241024

Third Party Advisory https://github.com/nomis/eero-zero-length-ipv6-options-header-dos

Permissions Required https://vuldb.com/?ctiid.241024

Third Party Advisory https://vuldb.com/?id.241024

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal