CVE-2024-44087
Last modified
CVE-2024-44087 is a critical-severity vulnerability rated 9.2/10 on the CVSS scale. A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.2 (All versions < V6.2 Upd3). Affected applications do not properly validate certain fields in incoming network packets on port 4410/tcp. EPSS estimates a 10.61% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.2 (All versions < V6.2 Upd3). Affected applications do not properly validate certain fields in incoming network packets on port 4410/tcp. This could allow an unauthenticated remote attacker to cause an integer overflow and crash of the application. This denial of service condition could prevent legitimate users from using subsequent products that rely on the affected application for license verification.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-44087?
How severe is CVE-2024-44087?
How do I fix CVE-2024-44087?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-44076In Microcks before 1.10.0, the POST /api/import and POST /ap…9.8
- CVE-2024-44080In Jitsi Meet before 2.0.9779, the functionality to share an…7.5
- CVE-2024-44081In Jitsi Meet before 2.0.9779, the functionality to share a …9.8
- CVE-2024-44082In OpenStack Ironic before 26.0.1 and ironic-python-agent be…4.3
- CVE-2024-44083ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there…7.5
- CVE-2024-44085ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunct…6.1
- CVE-2024-44088Malicious script injection ('Cross-site Scripting') vulnerab…6.1
- CVE-2024-4409The WP-ViperGB plugin for WordPress is vulnerable to Cross-S…4.3
- CVE-2024-44092There is a possible LCS signing enforcement missing due to …7.8
- CVE-2024-44093In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possi…7.8
- CVE-2024-44094In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possi…7.8
- CVE-2024-44095In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possi…7.8
Are you affected by CVE-2024-44087?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST