CVE-2021-25909 HIGH

CVE-2021-25909: ZIV AUTOMATION 4CCT Denial of Service vulnerability

Vendor Ziv Automation
Product 4CCT-EA6-334126BF
Weakness CWE-400
Published January 29, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919.

Key dates

02Disclosure timeline

January 29, 2021 CVE published
September 16, 2024 Record updated