CyberRota Analysis
AI-GeneratedThe vulnerability allows remote, unauthenticated attackers to exploit an out-of-bounds read in the TLS server function of Cesanta Mongoose versions prior to 7.22, leading to potential crashes of services such as HTTPS, MQTTS, or WSS. Attackers can manipulate the session_id_len byte in a crafted ClientHello message, resulting in buffer overflow and service disruption. Organizations utilizing affected versions of Cesanta Mongoose should prioritize patching to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mg_tls_server_recv_hello(), which uses an attacker-controlled session_id_len byte from a TLS ClientHello as a buffer index without validating it against the length of received data. A remote, unauthenticated attacker can send a single crafted ClientHello with an oversized session id length to read past the receive buffer, crashing any HTTPS, MQTTS, or WSS service built on MG_TLS_BUILTIN.