Description:

CVE-2024-0816 is a buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0. An authenticated local attacker could exploit this vulnerability by executing a CLI command with crafted strings on an affected device, leading to denial of service (DoS) conditions. The SVRS for this CVE is 34, indicating a moderate risk level.

Key Insights:

• Authenticated Local Attack: The vulnerability requires an attacker to be authenticated on the affected device, making it less likely to be exploited remotely.
• DoS Impact: The vulnerability can cause DoS conditions, disrupting the availability of the affected device.
• Firmware Version: The vulnerability affects only devices running firmware version V5.50(ABVY.4)C0.

Mitigation Strategies:

• Update Firmware: Update the firmware to the latest version to patch the vulnerability.
• Restrict Access: Implement access controls to limit the number of users who can authenticate to the affected device.
• Monitor Network Traffic: Monitor network traffic for suspicious activity that could indicate an exploitation attempt.

Additional Information:

• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.
• Exploit Status: No active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning for this vulnerability.
• In the Wild: The vulnerability is not known to be actively exploited in the wild.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.