CVE-2024-6594

HighCVSS 7.5/10Last modified Aug 8, 2026

Description

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by repeatedly issuing malformed commands.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-755

Affected software

Vendor	Product	Versions
WatchGuard	SSO Client	>= 12.0, <= 12.7
watchguard	single_sign-on_client	<= 12.7

References

Timeline

Published: Sep 25, 2024
Last modified: Aug 8, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-65955.3An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and CVE-2024-65969.8An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.CVE-2024-65986.5A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticat CVE-2024-65994.3The Meks Video Importer plugin for WordPress is vulnerable to unauthorized API key modification due to a missing capability check on the aja CVE-2024-66006.3Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 819 CVE-2024-66014.7A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < CVE-2024-66029.8A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 11 CVE-2024-66037.4In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption CVE-2024-66047.5Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corrupti CVE-2024-66058.8Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox CVE-2024-66068.2Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefo CVE-2024-66078.8It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `<sele