EUVD-2026-37578Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable, unauthenticated DoS with no scope change; availability impact limited to web interface only, yielding A:L with no confidentiality or integrity impact.
Primary rating from Vendor (HackRTU).
CVSS VectorVendor: HackRTU
Lifecycle Timeline
1DescriptionCVE.org
An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device. This issue affects Regesta Smart HD-PLC - TLDPH16D2: 11.02.05.10.02.
AnalysisAI
The web management interface of the Teldat Regesta Smart HD-PLC (model TLDPH16D2, firmware 11.02.05.10.02) is susceptible to resource exhaustion via a Slow Loris attack, making the administrative interface unavailable to legitimate operators. An unauthenticated network attacker can trigger this condition without any prior registration or credentials, as the embedded web server imposes no connection-hold limits or timeouts per CWE-770. No public exploit code or active exploitation has been identified at time of analysis; a vendor-released patch is available through the Teldat support portal.
Technical ContextAI
The Teldat Regesta Smart HD-PLC TLDPH16D2 (CPE: cpe:2.3:a:teldat:regesta_smart_hd-plc_-_tldph16d2) is a power-line communication (HD-PLC) networking appliance that exposes an HTTP-based web management interface. CWE-770 (Allocation of Resources Without Limits or Throttling) identifies the root cause: the embedded web server does not enforce concurrent connection limits, maximum request-hold timeouts, or per-source-IP rate controls. The Slow Loris technique exploits this directly - an attacker opens many simultaneous partial HTTP connections and sends just enough data at slow intervals to prevent server-side timeout closure, starving the socket pool and denying service to legitimate management sessions. The vulnerability is specific to the web interface layer and does not appear to affect the underlying HD-PLC data-plane forwarding function.
RemediationAI
Apply the vendor-released patch available through the Teldat customer support portal at https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US. The coordinated disclosure advisories published by HackRTU at https://www.hackrtu.com/blog/CNA-CVE-2026-27869/ and https://www.hackrtu.com/blog/CNA-HRTU-0002/ provide additional remediation context. Note that an exact patched firmware version number is not specified in the available data and should be confirmed directly with Teldat or HackRTU before deployment. As a compensating control pending patching, restrict access to the device's web management interface using firewall ACLs or upstream router rules to permit connections only from trusted administrator source IPs - this directly eliminates the network attack surface without affecting PLC data-plane operation. Additionally, configure any upstream network device capable of TCP connection-rate limiting to cap concurrent connections per source IP to the management port, which can neutralize the Slow Loris technique at the perimeter. These controls have no functional side effects on legitimate single-session management use.
Unauthenticated information disclosure in the Teldat Regesta Smart HD-PLC (model TLDPH16D2, firmware 11.02.05.10.02) exp
Stored cross-site scripting in Teldat's Regesta Smart HD-PLC (TLDPH16D2, firmware 11.02.05.10.02) allows a privileged, a
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today