CVE-2026-54213
Gravedad CVSS v4.0:
CRÍTICA
Tipo:
CWE-284
Control de acceso incorrecto
Fecha de publicación:
07/08/2026
Última modificación:
07/08/2026
Descripción
*** Pendiente de traducción *** Tobit Laboratories AG TeamDavid&#39;s Webbox application exposes a functionality that allows the server to be <br />
shut down when a specific endpoint (/internalRestart) is accessed. This <br />
endpoint is accessible to unauthenticated users over the public <br />
Internet. Instead of “restarting”, the server shuts completely down. As a<br />
result, a remote attacker can trigger a persistent denial of service by<br />
shutting down the web server without requiring authentication. Recovery<br />
requires manual administrator intervention to restart the service. This issue affects TeamDavid through Rollout 524.
Impacto
Puntuación base 4.0
9.20
Gravedad 4.0
CRÍTICA