CyberRota Analysis
AI-GeneratedAn insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows unauthenticated remote attackers to disrupt TCP connections by sending malformed RTSP requests. This can lead to denial of service, as the RTSP parser fails to reject the invalid input, causing it to consume all subsequent data until the connection times out. Organizations using this specific version of the MERCURY MIPC252W should prioritize immediate remediation to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an individual TCP connection temporarily unusable via sending an RTSP request with a Content-Length header but no corresponding message body. The affected RTSP parser enters a body-waiting state instead of rejecting the malformed request, causing all subsequent data on the connection to be silently consumed as body content until a server-side timeout closes the connection.