Home

Description

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device. This issue affects Regesta Smart HD-PLC - TLDPH16D2: 11.02.05.10.02.

PUBLISHED Reserved 2026-02-24 | Published 2026-06-17 | Updated 2026-06-17 | Assigner HackRTU




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-770 Allocation of resources without limits or throttling

Product status

Default status
unknown

11.02.05.10.02
affected

11.02.06.00.02
unaffected

Timeline

2026-02-20:Vulnerability detection by the researchers
2026-02-22:Report from researchers to the CNA of HackRTU
2026-02-25:Report from HackRTU CNA to the provider
2026-05-29:New version published by the provider
2026-06-17:Vulnerabilities published by HackRTU's CNA

Credits

Aarón Flecha Menéndez finder

Víctor Bello Cuevas finder

References

www.hackrtu.com/blog/CNA-HRTU-0002/ technical-description patch

www.hackrtu.com/blog/CNA-CVE-2026-27869/ technical-description patch

www.teldat.com/es/ product

support.teldat.com/...mart_nessum_series_installation(1).pdf product

support.teldat.com/...lobal-support&none=true&language=en-US patch

cve.org (CVE-2026-27869)

nvd.nist.gov (CVE-2026-27869)

Download JSON