NetSight
high7.5

CVE-2024-56316

In AXESS ACS (Auto Configuration Server) through 5.2.0, unsanitized user input in the TR069 API allows remote unauthenticated attackers to cause a permanent De…

Impact

In AXESS ACS (Auto Configuration Server) through 5.2.0, unsanitized user input in the TR069 API allows remote unauthenticated attackers to cause a permanent Denial of Service via crafted TR069 requests on TCP port 9675 or 7547. Rebooting does not resolve the permanent Denial of Service.

Affected products

ProductAffected versions
AXESS ACS (Auto Configuration Server)
through 5.2.0

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References