CVE-2024-21875

MEDIUM

Badge Team Hacker Hotel Badge 2024 0.1.0-0.1.3 - Denial of Service via Resource Flooding

Title source: llm
STIX 2.1

Description

Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team Hacker Hotel Badge 2024 on risc-v (billboard modules) allows Flooding.This issue affects Hacker Hotel Badge 2024: from 0.1.0 through 0.1.3.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory
https://csirt.divd.nl/CVE-2024-21875
Exploit, Issue Tracking vendor-advisory issue-tracking patch release-notes
https://github.com/badgeteam/hackerhotel-2024-firmware-esp32c6/pull/64

Scores

CVSS v3 6.5
EPSS 0.0046
EPSS Percentile 36.5%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (1)
badge.team/hacker_hotel_badge_2024 0.1.0 - 0.1.3
Published Feb 11, 2024
Tracked Since Feb 18, 2026