CVE-2024-44087

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.2 (All versions < V6.2 Upd3). Affected applications do not properly validate certain fields in incoming network packets on port 4410/tcp. This could allow an unauthenticated remote attacker to cause an integer overflow and crash of the application. This denial of service condition could prevent legitimate users from using subsequent products that rely on the affected application for license verification.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Sep 10, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-440886.1Malicious script injection ('Cross-site Scripting') vulnerability in Apache Geode web-api (REST). This vulnerability allows an attacker that CVE-2024-44094.3The WP-ViperGB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to CVE-2024-440927.8There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could lead to local escalat CVE-2024-440937.8In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local CVE-2024-440947.8In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This could lead to local CVE-2024-440957.8In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This could lead to local es CVE-2024-440964.4there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution p CVE-2024-440979.8According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not valida CVE-2024-440987.4In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to CVE-2024-440995.5There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local information disclosure with CVE-2024-44105.4The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.9.8. CVE-2024-441007.5Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.