The vulnerability in Tobit Laboratories AG TeamDavid's Webbox application allows unauthenticated remote attackers to trigger a shutdown of the web server by accessing the /internalRestart endpoint. Instead of performing a restart, the server completely shuts down, causing a denial of service. This endpoint is publicly accessible without authentication, making exploitation straightforward. Recovery from the shutdown requires manual intervention by an administrator to restart the service. The vulnerability is identified as CWE-284 (Improper Access Control) and affects versions of TeamDavid through Rollout 524. No patch or remediation information is provided in the available data.

A remote unauthenticated attacker can cause a persistent denial of service by shutting down the web server. This disrupts availability until manual administrator action is taken to restart the service. There is no indication of data compromise or privilege escalation from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the /internalRestart endpoint by network controls or firewall rules to prevent unauthenticated access. Monitor for attempts to access this endpoint and prepare for manual recovery procedures in case of shutdown.