CVE-2024-7734
published 2024-09-10CVE-2024-7734: An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the…
PriorityP427medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.48%
38.3th percentile
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.
Affected
72 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phoenix_contact | fl_mguard_2102 | < 10.4.1 | 10.4.1 |
| phoenix_contact | fl_mguard_2105 | < 10.4.1 | 10.4.1 |
| phoenix_contact | fl_mguard_4102_pci | < 10.4.1 | 10.4.1 |
| phoenix_contact | fl_mguard_4102_pcie | < 10.4.1 | 10.4.1 |
| phoenix_contact | fl_mguard_4302 | < 10.4.1 | 10.4.1 |
| phoenix_contact | fl_mguard_4305 | < 10.4.1 | 10.4.1 |
| phoenix_contact | fl_mguard_centerport_vpn-1000 | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_core_tx | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_core_tx_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_delta_tx_tx | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_delta_tx_tx_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_gt_gt | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_gt_gt_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_pci4000 | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_pci4000_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_pcie4000 | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_pcie4000_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs2000_tx_tx-b | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs2000_tx_tx_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs2005_tx_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs4000_tx_tx | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs4000_tx_tx-m | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs4000_tx_tx-p | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs4000_tx_tx_vpn | < 8.9.3 | 8.9.3 |
| phoenix_contact | fl_mguard_rs4004_tx_dtx | < 8.9.3 | 8.9.3 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
osv5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
osv·2025-10-27·CVSS 5.3
CVE-2024-35176 ruby2.3, ruby2.5, ruby2.7 vulnerabilities
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that the REXML module bunded into Ruby incorrectly
handled parsing XML documents with repeated instances of certain
characters. An attacker could possibly use this issue to cause REXML to
consume excessive resources, leading to a denial of service. Ubuntu 18.04
LTS and Ubuntu 20.04 LTS were previously addressed in USN-7256-1 and
USN-7734-1. This update addresses the issue in Ubuntu 16.04 LTS.
(CVE-2024-35176)
It was discovered that the REXML module bunded into Ruby incorrectly
handled parsing XML documents with repeated instances of certain
characters. An attacker could possibly use this issue to cause REXML to
consume excessive resources, leading to a denial of service. Ubuntu 20.04
LTS was previously addressed in USN-7256-1. T
GHSA
GHSA-rhjq-jm8v-8g8r: An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connectio
ghsa_unreviewed·2024-09-10
CVE-2024-7734 [MEDIUM] CWE-770 GHSA-rhjq-jm8v-8g8r: An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connectio
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-10
Published