5.3

CVE-2024-7734

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
PhoenixcontactFl Mguard 4305 Firmware Version < 10.4.1
   PhoenixcontactFl Mguard 4305 Version-
PhoenixcontactFl Mguard 4302 Firmware Version < 10.4.1
   PhoenixcontactFl Mguard 4302 Version-
PhoenixcontactFl Mguard 2105 Firmware Version < 10.4.1
   PhoenixcontactFl Mguard 2105 Version-
PhoenixcontactFl Mguard 2102 Firmware Version < 10.4.1
   PhoenixcontactFl Mguard 2102 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.362
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
info@cert.vde.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.