CVE-2024-2758

CVE-2024-2758

Medium · published April 3, 2024

Patch now

High probability of exploitation

CVSS calls it medium at 6.3. It sits in the 99.4th percentile for exploit probability.

CVSS v3.1
6.3
EPSS
73%
Percentile
99.4
In the wild
Unconfirmed
What it is

Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.72750 · 99.4th percentile
Published
2024-04-03T17:17Z
EPSS history
Timeline
  • 03 APR 17:17Z
    CVE-2024-2758
    cvelistv5