PT-2025-30743 · Kron Pam · Kron Pam

Taha Yildirim + 1 · Published 2025-07-25 · Updated 2025-07-25 · CVE-2025-5253

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kron PAM versions prior to 3.7

Description Kron PAM is susceptible to a denial-of-service (DoS) attack due to unrestricted resource allocation. This allows an attacker to exhaust system resources via HTTP requests.

Recommendations Update Kron PAM to version 3.7 or later.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-5253

Affected Products

Kron Pam

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-5253 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0178 · Note
• https://twitter.com/CVEnew/status/1948712642136227919 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0178 · Note