VULNERABILITY INTELLIGENCE
CVE-2024-11862
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-11-27
Last modified2026-06-17
Description
Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks
Weakness classification
- security@devolutions.net: CWE-385