Technical impact
The Dbit N300 T1 Pro Easy Setup Wireless Wi‑Fi Router V1.0.0 is vulnerable to a denial‑of‑service attack that targets the boa web server URI handler. By sending a high‑volume flood of HTTP GET requests to URIs that do not exist, an attacker can overwhelm the router’s critical system resources such as file descriptors and memory buffers. This exhaustion can lead to a kernel deadlock or complete system hang, disabling the management portal and all routing functions.
Affected Systems
Router models: Dbit N300 T1 Pro, firmware version V1.0.0.
Risk and Exploitability
Based on the description, it is inferred that the vulnerability can be exploited by sending a high‑volume flood of HTTP GET requests over a network to non‑existent URIs, which the router processes via its boa web server URI handler. This can exhaust crucial system resources such as file descriptors and memory buffers, leading to a kernel deadlock or system hang. The EPSS score of 0.0004 indicates a low probability of exploitation, and the issue is not listed in CISA KEV. The CVSS score of 7.5 indicates a high severity rating. The resulting denial of service can disable the web management portal and all routing functions without requiring privileged credentials.
