CVE-2024-10345CWE-400

Unauthenticated Denial of Service via Shutdown Function

High · published November 11, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Karol Więsek.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00490 · 41.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-11-11T13:28Z
EPSS history
Timeline
  • 11 NOV 13:28Z
    Unauthenticated Denial of Service via Shutdown Function
    cvelistv5