This vulnerability (CWE-606) exists in the SNMP agent of Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD devices running firmware through version 8.4.16 on the LINX-A64 platform. The flaw is due to unchecked input used as a loop condition, which can be exploited remotely without authentication by sending a specially crafted SNMP GETNEXT request containing a large OID component. This causes the device to enter a CPU exhaustion state, resulting in a persistent denial of service condition. The CVSS 4.0 base score is 6.6, reflecting medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability.

An unauthenticated remote attacker can exploit this vulnerability to cause persistent denial of service by exhausting CPU resources on affected devices. This disrupts normal device operation and availability but does not indicate direct compromise of confidentiality or integrity based on the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Until a patch is available, consider limiting exposure of SNMP services to untrusted networks to reduce risk.