The Dbit N300 T1 Pro router is vulnerable to a denial of service attack that can disable all routing capabilities and management access via unauthenticated network requests.

The vulnerability exists within the boa web server URI handler, where the device fails to properly manage resources under high request volume. An unauthenticated remote attacker can trigger a kernel deadlock by flooding the device with HTTP GET requests for non-existent URIs.

Successful exploitation of this vulnerability results in a total denial of service, rendering the router unresponsive and disrupting all network traffic passing through the device. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to business continuity, as it allows even low-skilled, unauthenticated attackers to cause complete system downtime.

Immediate Action: As no official patch is currently identified, administrators should restrict access to the router management interface to trusted internal networks only.

Proactive Monitoring: Monitor network traffic for unusual spikes in HTTP GET requests directed at the router, particularly those targeting non-existent or malformed URIs.

Compensating Controls: Implement rate-limiting on the perimeter firewall or utilize an Intrusion Prevention System to detect and drop excessive connection attempts originating from untrusted sources.

Public Exploit Available: Yes, a proof-of-concept is available via the linked researcher repository on GitHub.

The potential for complete network disruption makes this vulnerability a high priority for organizations utilizing this hardware. While a vendor patch is currently missing, immediate network segmentation and strict access controls are necessary to prevent remote attackers from reaching the vulnerable management interface.