Skip to main content

Allocation of File Descriptors or Handles Without Limits or Throttling

CVE-2024-48848

High
7/10

Summary

Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-774 - Allocation of File Descriptors or Handles Without Limits or Throttling

The software allocates file descriptors or handles on behalf of an actor without imposing any restrictions on how many descriptors can be allocated, in violation of the intended security policy for that actor.

References

Advisory Timeline

  • Published