CVE-2024-2169

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
MikroTik	RouterOS-TFTP	<= 7.13.2
Microsoft	WDS	*
dproxy-nexgen	dproxy-nexgen	>= 0.1, <= 0.5
mikrotik	routeros_tftp	<= 7.13.2
microsoft	wds	<= *
dproxy-nexgen_project	dproxy-nexgen	>= 0.1, <= 0.5

References

Timeline

Published: Mar 19, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-216908.2This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0 CVE-2024-216978.8This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetre CVE-2024-21705.4The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the child page index widget in all ve CVE-2024-217036.4This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Window CVE-2024-21714.8A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logo_url' field.CVE-2024-21729.8The Malware Scanner plugin and the Web Application Firewall plugin for WordPress (both by MiniOrange) are vulnerable to privilege escalation CVE-2024-217226.3The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.CVE-2024-217234.3Inadequate parsing of URLs could result into an open redirect.CVE-2024-217246.1Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.CVE-2024-217256.1Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components.CVE-2024-217266.5Inadequate content filtering leads to XSS vulnerabilities in various components.CVE-2024-217276.1XSS vulnerability in DP Calendar component for Joomla.