CVE-2024-2169 - CVE House
Back to Database
Status published Unknown CVE-2024-2169

Implementations of UDP application protocols are susceptible to network loops and denial of service

Vulnerability Description

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2169

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Thanks to the reporters Yepeng Pan and Christian Rossow from the CISPA Helmholtz Center for Information Security, Germany.

Affected Vendor

Affected Software

RouterOS-TFTP, WDS, dproxy-nexgen
Vulnerable Versions:
*, 0.1

Timeline

Official Publish: March 19th, 2024
Last Modified: September 4th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.