What’s Vulnerable › Vulnerabilities

CVE-2024-23930: Pioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional Conditions

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-31 · updated 2026-06-17
• Weakness: CWE-404

Description

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Media service, which listens on TCP port 42000 by default. The issue results from improper handling of error conditions. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

Affected products

• Pioneer DMH-WT7600NEX: all versions

References

• https://jpn.pioneer/ja/car/dl/dmh-sz700_sf700/
• https://www.zerodayinitiative.com/advisories/ZDI-24-1043/

Get alerted when CVE-2024-23930 or the next vulnerability affects your stack