Lucene search

K
broadcomBroadcom Security ResponseBSNSA22195
HistoryMay 19, 2023 - 12:00 a.m.

CVE-2023-29552 - Abuse of the Service Location Protocol May Lead to DoS Attacks

2023-05-1900:00:00
Broadcom Security Response
support.broadcom.com
14
cve-2023-29552
service location protocol
dos attacks
udp traffic
amplification factor
remote attack

7.5 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.7%

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor. More at:

Products Confirmed Not Affected

No Brocade Fibre Channel Products from Broadcom products are known to be affected by this vulnerability.

7.5 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.7%