{"id":"CVE-2026-39453","published":"2026-10-09T15:17:14.500","lastModified":"2026-10-11T17:17:05.000","description":"Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots.","cvssScore":8.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","cwes":["CWE-617"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01","tags":[]},{"url":"https://www.hms-networks.com/","tags":[]},{"url":"https://www.hms-networks.com/cybersecurity","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json","tags":[]}],"hasPoc":true,"ai":{"summary":"A vulnerability in switch web server allows remote attackers to trigger device reboots via specific URLs, creating persistent denial-of-service conditions. This affects network infrastructure devices and can lead to service disruption.","exploitability":"Exploitation is straightforward requiring only HTTP access to the switch's web interface with minimal privileges, making it easy to automate with tools like curl.","blast_radius":"The impact could be significant in network environments where switches are critical for connectivity, potentially causing widespread outages if multiple switches are targeted simultaneously.","remediation":"Disable the affected web server functionality or restrict access to the vulnerable endpoint until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","web","network","switch"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:56:42.385Z"}}