CVE-2024-0210
Wireshark
CVE-2024-0210: A denial-of-service vulnerability exists in the Zigbee TLV dissector of Wireshark version 4.2.0. This security flaw allows attackers to crash the application by injecting malicious network packets or using specially crafted capture files. While the CVSS score is 7.5, indicating high severity, the SOCRadar Vulnerability Risk Score (SVRS) of 68 suggests a moderate risk level, meaning that while the vulnerability is present, it may not be actively exploited, or the impact is less severe than the CVSS score indicates. Exploitation leads to a denial of service, potentially disrupting network monitoring and analysis activities. Organizations using Wireshark 4.2.0 should prioritize updating to a patched version to mitigate this cybersecurity risk. This is significant because Wireshark is a widely used network protocol analyzer, making it a valuable target for attackers seeking to disrupt network operations.
Description:
CVE-2024-0210 is a vulnerability in Wireshark, a popular network protocol analyzer. The vulnerability allows a remote attacker to cause a denial of service (DoS) condition by sending a specially crafted packet or capture file. The SVRS for this vulnerability is 30, indicating a moderate risk.
Key Insights:
- The vulnerability is exploitable remotely, allowing attackers to target systems without physical access.
- The vulnerability can be exploited by sending a specially crafted packet or capture file, making it relatively easy for attackers to exploit.
- The vulnerability can cause a DoS condition, preventing users from accessing or using the affected system.
Mitigation Strategies:
- Update Wireshark to the latest version (4.2.1).
- Implement network-based intrusion detection and prevention systems (IDS/IPS) to detect and block malicious traffic targeting the vulnerability.
- Educate users about the vulnerability and how to avoid it, such as not opening suspicious files or clicking on links in unsolicited emails.
Additional Information:
- There are no known active exploits for this vulnerability.
- CISA has not issued a warning for this vulnerability.
- The vulnerability is not known to be used in the wild.
If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.