CVE Feed

    Dashboard / CVE / CVE-2024-51500

    CVE-2024-51500

    Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets claiming to be from the special broadcast address (0xFFFFFFFF) which could result in unexpected behavior and potential for DDoS attacks on the network. A malicious actor could craft a packet to be from that address which would result in an amplification of this one message into every node on the network sending multiple messages. Such an attack could result in degraded network performance for all users as the available bandwidth is consumed. This issue has been addressed in release version 2.5.6. All users are advised to upgrade. There are no known workarounds for this vulnerability.

    Published:Nov 4, 2024
    Last Modified:Oct 15, 2025
    EPS:Nov 4, 2024
    EPSS Score:0.00179
    CVSS Score:5.3

    Affected Products

    Vendor
    Meshtastic
    Product
    Firmware
    Vendor
    Meshtastic
    Product
    Meshtastic Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-42566 (CVSS 7.5) — Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertis…
    CVE-2026-44359 (CVSS 10) — Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub …
    CVE-2025-55292 (CVSS 8.2) — Meshtastic is an open source mesh networking solution. In the current Meshtastic architecture, a Node is ident…
    CVE-2025-53627 (CVSS 5.3) — Meshtastic is an open source mesh networking solution. The Meshtastic firmware (starting from version 2.5) int…
    CVE-2025-55293 (CVSS 9.4) — Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a e…
    CVE-2024-47065 (CVSS 2.7) — Meshtastic is an open source mesh networking solution. Prior to 2.5.1, traceroute responses from the remote no…
    CVE-2025-53637 (CVSS 4.1) — Meshtastic is an open source mesh networking solution. The main_matrix.yml GitHub Action is triggered by the p…
    CVE-2025-24798 (CVSS 4.3) — Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing mo…
    CVE-2025-52464 (CVSS 9.5) — Meshtastic is an open source mesh networking solution. In versions from 2.5.0 to before 2.6.11, the flashing p…
    CVE-2025-24797 (CVSS 9.4) — Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing inva…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High