CVE-2024-5950

Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of multipart form variables. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-23172.

• CWE-121
• CWE-787

• https://www.zerodayinitiative.com/advisories/ZDI-24-674/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-24-674/Third Party Advisory, VDB Entry

Published

Jun 13, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5943The Nested Pages plugin for WordPress is vulnerable to Cross…8.8
• CVE-2024-5945The WP SVG Images plugin for WordPress is vulnerable to Stor…5.4
• CVE-2024-5946The Squelch Tabs and Accordions Shortcodes plugin for WordPr…6.4
• CVE-2024-5947Deep Sea Electronics DSE855 Configuration Backup Missing Aut…6.5
• CVE-2024-5948Deep Sea Electronics DSE855 Multipart Boundary Stack-Based B…8.8
• CVE-2024-5949Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop…6.5
• CVE-2024-5951Deep Sea Electronics DSE855 Factory Reset Missing Authentica…6.5
• CVE-2024-5952Deep Sea Electronics DSE855 Restart Missing Authentication D…6.5
• CVE-2024-5953A denial of service vulnerability was found in the 389-ds-ba…5.7
• CVE-2024-5955Cross-site scripting vulnerability in Trellix ePolicy Orches…5.4
• CVE-2024-5956This vulnerability allows unauthenticated remote attackers t…5.3
• CVE-2024-5957This vulnerability allows unauthenticated remote attackers t…7.5