CVE-2024-4292

A vulnerability classified as critical has been found in Contemporary Controls BASrouter BACnet BASRT-B 2.7.2. Affected is an unknown function of the component Device-Communication-Control Service. The manipulation with the input 55ff0500370015f30104025506110afb7519035d0841e4bece257b6acfc71f leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262224. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-404

• https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASER-B_backdoor.pcapng
• https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT_CVE_apply.pdf
• https://vuldb.com/?ctiid.262224
• https://vuldb.com/?id.262224
• https://vuldb.com/?submit.320749
• https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASER-B_backdoor.pcapng
• https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT_CVE_apply.pdf
• https://vuldb.com/?ctiid.262224
• https://vuldb.com/?id.262224
• https://vuldb.com/?submit.320749

Published

Apr 27, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-42912A cross-site scripting (XSS) vulnerability in META-INF Kft. …5.4
• CVE-2024-42913RuoYi CMS v4.7.9 was discovered to contain a SQL injection v…9.8
• CVE-2024-42914A host header injection vulnerability exists in the forgot p…9.1
• CVE-2024-42915A host header injection vulnerability in Staff Appraisal Sys…8
• CVE-2024-42918itsourcecode Online Accreditation Management System contains…5.4
• CVE-2024-42919eScan Management Console 14.0.1400.2281 is vulnerable to Inc…9.8
• CVE-2024-42922AAPanel v7.0.7 was discovered to contain an OS command injec…6.5
• CVE-2024-4293A vulnerability classified as problematic was found in PHPGu…5.4
• CVE-2024-42930PbootCMS 3.2.8 is vulnerable to URL Redirect.6.1
• CVE-2024-42934OpenIPMI before 2.0.36 has an out-of-bounds array access (fo…5
• CVE-2024-42936The mqlink.elf is service component in Ruijie RG-EW300N with…9.8
• CVE-2024-42939A cross-site scripting (XSS) vulnerability in the component …5.4