BIT-mongodb-2025-3083

vendorUSosv

Malformed MongoDB wire protocol messages may cause mongos to crash

view advisory published 2025-09-23Licence: per source

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-3083US	—	0.45% (39th)	—	2025-04-01
Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affect…

references

External citations — patches, advisories, analysis.

https://jira.mongodb.org/browse/SERVER-103152ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-3083WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan