High severity · published Nov 11, 2024
CVE-2024-10345
Unauthenticated Denial of Service via Shutdown Function
8.7
CVSS
0.5%
EPSS
No
On KEV
Description
In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Karol Więsek.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HC
Helix Core · Helix
0.0.0 before 2024.2; 0.0.0 before 2024.1; 0.0.0 before 2023.2; 0.0.0 before 2023.1; 0.0.0 before 2022.2 · source: vendor, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10345
portal.perforce.com
https://portal.perforce.com/s/detail/a91PA000001SZQTYA4
More from Helix Core
9.8
CVE-2023-45849
Arbitrary Code Execution in Helix Core
8.7
CVE-2024-10314
Unauthenticated Denial of Service via Auto Generation Function
8.7
CVE-2024-10344
Unauthenticated Denial of Service via Refuse Function
7.5
CVE-2023-5759
Unauthenticated Remote Denial-of-Service via Buffer in Helix Core
7.5
CVE-2023-45319
Unauthenticated Remote Denial-of-Service (Commit) in Helix Core