Satel Netco Design
Satel Netco Design before 2.1.7 has XSS, ReDoS, and path traversal that could enable code execution.
42
CVE-2026-104628
Regex complexity DoS in Satel Netco Design before 2.1.7
- CVSS 4.0
- 7.1 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Satel Netco Design versions before v2.1.7 contain an inefficient regular-expression complexity flaw (CWE-1333). An authenticated user who already has Viewer privileges can submit crafted search input that forces excessive regex processing and can degrade application availability. Confidentiality and integrity are not affected; the impact is denial of service of the application. Only Satel Netco Design releases older than v2.1.7 are in scope. No public proof of concept is known and the CVE is not in CISA KEV.
What to do: Upgrade Satel Netco Design to v2.1.7 or later. Until then, restrict Viewer accounts to trusted users, limit search input length if the product allows it, and watch application CPU and responsiveness for searches that hang the service.
| Product | Affected |
|---|---|
| Satel Netco Design | prior to v2.1.7 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application.
- Weakness
- CWE-1333
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X