Denial of Service Vulnerability in Rostelecom CS-C2SHW 5.0.082.1: AgentGreen Service Buffer Allocation Bug

CVE-2020-27541 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As the result service AgentGreen will be terminated and started again later.

Learn more about our Web Application Penetration Testing UK.