PT-2024-6397 · Unknown · Dual-Redundant Platform For Computer

Published 2024-09-16 · Updated 2024-10-01 · CVE-2024-8110

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Dual-redundant Platform for Computer (affected versions not specified)

Description A Denial of Service (DoS) issue has been identified, which can be triggered by sending a large number of UDP broadcast packets to a computer with the affected product installed, potentially causing the computer to restart. If both the active and standby computers are restarted simultaneously, functionality may be temporarily unavailable. The vulnerability is related to incorrect checking of the return value of a method or function, allowing a remote attacker to cause a denial of service by sending UDP broadcast packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2024-07482

CVE-2024-8110

Affected Products

Dual-Redundant Platform For Computer

References · 12

• https://bdu.fstec.ru/vul/2024-07482 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-8110 · Security Note
• https://twitter.com/transilienceai/status/1838932957387509848 · Twitter Post
• https://twitter.com/transilienceai/status/1839370038161080631 · Twitter Post
• https://t.me/cvedetector/5793 · Telegram Post
• https://t.me/latest_high_impact_cve/1158 · Telegram Post
• https://twitter.com/transilienceai/status/1840933167496147410 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1835912337234043298 · Twitter Post
• https://web-material3.yokogawa.com/1/36276/files/YSAR-24-0003-E.pdf · Note
• https://twitter.com/cracbot/status/1837733640308248959 · Twitter Post
• https://twitter.com/transilienceai/status/1838591128330997854 · Twitter Post
• https://twitter.com/CVEnew/status/1835866964805198003 · Twitter Post