Lucene search

HoneywellCVELIST:CVE-2024-1309

HistoryFeb 13, 2024 - 1:41 p.m.

CVE-2024-1309 Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5

2024-02-1313:41:51

CWE-400

Honeywell

www.cve.org

cve

resource consumption

ntp

honeywell

niagara framework

windows

linux

qnx

content spoofing

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

15.5%

JSON

Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara AX 3.8.1, before Niagara 4.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "Linux",
      "QNX"
    ],
    "product": "Niagara Framework",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThan": "Niagara AX 3.8.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "Niagara 4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

process.honeywell.com

www.honeywell.com/us/en/product-security

www.kb.cert.org/vuls/id/417980

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

15.5%

JSON

Related for CVELIST:CVE-2024-1309