CVE-2024-21875 MEDIUM

CVE-2024-21875: DoS attack when broadcasting billboard messages

Vendor Badge.team
Product Hacker Hotel Badge 2024
Weakness CWE-770 · Uncontrolled resource consumption
Published February 11, 2024
Last update March 11, 2025

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team Hacker Hotel Badge 2024 on risc-v (billboard modules) allows Flooding.This issue affects Hacker Hotel Badge 2024: from 0.1.0 through 0.1.3.

Key dates

02Disclosure timeline

February 11, 2024 CVE published
March 11, 2025 Record updated