Technical impact
A high volume of concurrent HTTP requests targeted at the web management interface of the U‑SPEED N300 router overloads its embedded Boa HTTP server, rapidly exhausting memory and file descriptor resources. This resource exhaustion renders the web interface unresponsive, effectively denying administrators access to manage the device until a manual reboot restores service.
Affected Systems
U‑SPEED N300 wireless router, version V1.0.0, is the only product listed as affected by this denial‑of‑service flaw.
Risk and Exploitability
The vulnerability can be exercised remotely by any host that can reach the router’s management interface, without requiring authentication. An attacker can simply flood the interface with many concurrent requests to random or non‑existent endpoints, triggering the server to deplete its resources. The CVSS score of 7.5 reflects a high severity impact, while the EPSS metric is very low (<1%), indicating a small likelihood of exploitation, and the flaw is not in CISA’s KEV catalog, suggesting limited or no known active exploitation, though the risk remains if the router is exposed to untrusted networks.
