Vulnerability · Published Feb 2, 2024 · Assigned by VulDB

CVE-2024-1189AMPPS Encryption Passphrase denial of service

Medium 5.3

In plain English

A medium-severity security flaw in AMPPS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.7%top 46.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Encryption Passphrase Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-252679. NOTE: The vendor explains that AMPPS 4.0 is a complete overhaul and the code was re-written.

Affected products (as reported)

Vendor	Product	Versions
n/a	AMPPS	2.7

Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

https://vuldb.com/?id.252679 vdb-entry
https://vuldb.com/?ctiid.252679 signature, permissions-required
https://fitoxs.com/vuldb/15-exploit-perl.txt exploit