Please refer to the answer provided here.
Just wanted to understand what are the legal implication if someone really exploited such a security hole to disrupt the system. Will he be legally charged for such act, and what kind of punishment / penalty will be levied.
As Cyber laws differ from country to country, please refer to the location you are talking about.
Please note I dont have any of such ideas, this is just for the sake of understanding.