CVE-2025-14466
Denial-of-Service via HTTP Request in Güralp Web Interface
Publication date: 2025-12-16
Last updated on: 2025-12-16
Assigner: ICS-CERT
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| guralp | certimus_series | * |
| guralp | minimus_series | * |
| guralp | fortimus_series | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-770 | The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the web interface of the Güralp Fortimus, Minimus, and Certimus Series devices. It allows an unauthenticated attacker with network access to send specially-crafted HTTP requests that cause the web service process to deliberately restart, resulting in a brief denial-of-service condition.
How can this vulnerability impact me? :
The impact of this vulnerability is a brief denial-of-service condition caused by the web service process restarting when targeted by specially-crafted HTTP requests. This could temporarily disrupt access to the affected devices' web interfaces.