← Back to CVE Explorer

CVE-2026-27869

Full vulnerability record from the local CVENow database.

Description

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device. This issue affects Regesta Smart HD-PLC - TLDPH16D2: 11.02.05.10.02.

Severity
MEDIUM
CVSS score
6.9 (v4.0)
Vulnerability status
Deferred
Source identifier
ffb98d57-deaa-4918-a669-5225ccc13e39
Published
2026-06-17 13:20:13.413000
Last modified
2026-10-26 11:10:00.157000
View original CVE JSON
{
  "id": "CVE-2026-27869",
  "sourceIdentifier": "ffb98d57-deaa-4918-a669-5225ccc13e39",
  "published": "2026-06-17T13:20:13.413",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device. This issue affects Regesta Smart HD-PLC - TLDPH16D2: \n11.02.05.10.02."
    },
    {
      "lang": "es",
      "value": "Un atacante con acceso a través de la red al Regesta Smart HD-PLC del proveedor Teldat (en este caso, NO se requiere ninguna acción de registro) que tenga el software vulnerable podría, con un ataque Slow Loris, causar una denegación de servicio (DoS) en la interfaz web del dispositivo. Este problema afecta a Regesta Smart HD-PLC - TLDPH16D2: 11.02.05.10.02."
    }
  ],
  "affected": [
    {
      "source": "ffb98d57-deaa-4918-a669-5225ccc13e39",
      "affectedData": [
        {
          "vendor": "Teldat",
          "product": "Regesta Smart HD-PLC - TLDPH16D2",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "11.02.05.10.02",
              "status": "affected"
            },
            {
              "version": "11.02.06.00.02",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "ffb98d57-deaa-4918-a669-5225ccc13e39",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 6.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "LOW",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-17T14:20:10.059533Z",
          "id": "CVE-2026-27869",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "ffb98d57-deaa-4918-a669-5225ccc13e39",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.teldat.com/images/content/docs/Teldat_dm1087_regesta_smart_nessum_series_installation(1).pdf",
      "source": "ffb98d57-deaa-4918-a669-5225ccc13e39"
    },
    {
      "url": "https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US",
      "source": "ffb98d57-deaa-4918-a669-5225ccc13e39"
    },
    {
      "url": "https://www.hackrtu.com/blog/CNA-CVE-2026-27869/",
      "source": "ffb98d57-deaa-4918-a669-5225ccc13e39"
    },
    {
      "url": "https://www.hackrtu.com/blog/CNA-HRTU-0003/",
      "source": "ffb98d57-deaa-4918-a669-5225ccc13e39"
    },
    {
      "url": "https://www.teldat.com/es/",
      "source": "ffb98d57-deaa-4918-a669-5225ccc13e39"
    }
  ]
}