CVE-2024-42392 | Nozomi Networks Labs

Summary

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters.

Impact

By exploiting this issue it is possible to trigger an infinite loop bug if the input string contains unexpected characters.

Issue Date

Affects

This issue affects Mongoose Web Server v7.14

CVE Name

CVE-2024-42392

CVSS Details

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

CVSS Score

4.0

Solution

It is highly recommended to not expose the vulnerable component inside an untrusted network.

Mitigations

Acknowledgements

Gabriele Quagliarella of Nozomi Networks

Nozomi Threat Intelligence

Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.

Learn more