CVE-2024-2758

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-27597.5Improper access control vulnerability in Apaczka plugin for PrestaShop allows information gathering from saved templates without authenticatCVE-2024-275924.3Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted linCVE-2024-275935.4A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attCVE-2024-27605.5Bkav Home v7816, build 2403161130 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x222240 IOCTL code of the BkavCVE-2024-276029.1Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /apiCVE-2024-276049.8Alldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be deserialized.CVE-2024-276057.5Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system.CVE-2024-276096.5Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.CVE-2024-27616.8The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at CVE-2024-276126.2Numbas editor before 7.3 mishandles editing of themes and extensions.CVE-2024-276137.3Numbas editor before 7.3 mishandles reading of themes and extensions.CVE-2024-276197.3Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to
CVE-2024-2758: Medium severity, CVSS 6.3 | Vulnix