Satel Netco Design versions before v2.1.7 contain an inefficient regular expression that can be triggered by an authenticated user with Viewer privileges. When a carefully crafted search string is submitted, the application performs excessive computation, consuming CPU and memory resources. This behavior can degrade the availability of the system for legitimate users and potentially lead to a denial of service.

The vulnerability affects all installations of Satel Netco Design prior to version 2.1.7. The vendor explicitly recommends updating to v2.1.7 or later to remediate the issue.

The CVSS score of 7.1 indicates a high severity. The Exploit Prediction Scoring System is not available, so the current exploitation likelihood is uncertain. The vulnerability is not listed in the CISA KEV catalog. Since the input is authenticated, the attack vector is likely limited to users who have legitimate access to the system, such as internal personnel. An attacker who achieves this level of access can craft input that forces the application to perform heavy processing, potentially exhausting resources and triggering a denial of service.