VULNERABILITY INTELLIGENCE

CVE-2024-2758

CVSS score6.3 MEDIUM
EPSS probability72.75%
CISA KEVNot currently listed
Published2024-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.

Primary references