Description
VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VIMESA | VHF/FM Transmitter Blue Plus | v9.7.1 | — |
Advisories 1
- ICSA-24-298-01 VIMESA VHF/FM Transmitter Blue Plus CISA ICS & IT advisories · Oct 24, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-01 government-resource