ZDI-24-674: (0Day) Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-5950.

0day arbitrary code attackers authentication buffer buffer overflow code code execution cve cve-2024 cves cvss devices electronics exploit handling network overflow rating remote code remote code execution sea stack value vulnerability zdi