CVE-2024-5422

Denial of Service

View on CVE.org

Published Jun 4, 2024 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Description

An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

SEH Computertechnik

utnserver Pro

unaffected

Version	Status	Constraints
`0`	affected	≤ 20.1.22

SEH Computertechnik

utnserver ProMAX

unaffected

Version	Status	Constraints
`0`	affected	≤ 20.1.22

SEH Computertechnik

INU-100

unaffected

Version	Status	Constraints
`0`	affected	≤ 20.1.22

No data.

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2024-46644	An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.665% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
http://seclists.org/fulldisclosure/2024/Jun/4
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html

History

Jul 13, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00213}`	epss `{'score': 0.00095}`

Jul 12, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00073}`	epss `{'score': 0.00213}`

Subscriptions

No data.

Weaknesses

CWE-400

Sources

CVE record Updated: Feb 13, 2025, 5:54 PM

Status: PUBLISHED
Assigner: CyberDanube
Published: Jun 4, 2024, 8:06 AM
Updated: Feb 13, 2025, 5:54 PM
Reserved: May 27, 2024, 2:10 PM

View source JSON

Vulnrichment Updated: Aug 1, 2024, 9:11 PM

Updated: Aug 1, 2024, 9:11 PM

NVD Updated: Jun 17, 2026, 8:15 AM

Status: Deferred
Published: Jun 4, 2024, 8:15 AM
Modified: Jun 17, 2026, 8:15 AM

View source JSON

Red Hat No data

No data.

OpenCVE enrichment No data

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-5422", "assignerOrgId": "7d092a75-6bbd-48c6-a15a-0297458009bc", "state": "PUBLISHED", "assignerShortName": "CyberDanube", "dateReserved": "2024-05-27T14:10:26.370Z", "datePublished": "2024-06-04T08:06:45.294Z", "dateUpdated": "2025-02-13T17:54:14.807Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "utnserver Pro", "vendor": "SEH Computertechnik", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "utnserver ProMAX", "vendor": "SEH Computertechnik", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "INU-100", "vendor": "SEH Computertechnik", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "T. Weber"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.<p>This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.</p>"}], "value": "An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below."}], "impacts": [{"capecId": "CAPEC-469", "descriptions": [{"lang": "en", "value": "CAPEC-469 HTTP DoS"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 7.1, "baseSeverity": "HIGH", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7d092a75-6bbd-48c6-a15a-0297458009bc", "shortName": "CyberDanube", "dateUpdated": "2024-06-10T17:07:57.826Z"}, "references": [{"url": "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html"}, {"url": "http://seclists.org/fulldisclosure/2024/Jun/4"}], "source": {"discovery": "EXTERNAL"}, "title": "Denial of Service", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-5422", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-04T13:55:01.394288Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:seh:utnserver_pro:-:*:*:*:*:*:*:*"], "vendor": "seh", "product": "utnserver_pro", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:seh:utnserver_promax:-:*:*:*:*:*:*:*"], "vendor": "seh", "product": "utnserver_promax", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:seh:inu-100:-:*:*:*:*:*:*:*"], "vendor": "seh", "product": "inu-100", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T18:02:04.365Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:11:12.739Z"}, "title": "CVE Program Container", "references": [{"url": "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jun/4", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jun/4", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:11:12.739Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-5422", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-04T13:55:01.394288Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:seh:utnserver_pro:-:*:*:*:*:*:*:*"], "vendor": "seh", "product": "utnserver_pro", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:seh:utnserver_promax:-:*:*:*:*:*:*:*"], "vendor": "seh", "product": "utnserver_promax", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:seh:inu-100:-:*:*:*:*:*:*:*"], "vendor": "seh", "product": "inu-100", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T13:54:27.837Z"}}], "cna": {"title": "Denial of Service", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "T. Weber"}], "impacts": [{"capecId": "CAPEC-469", "descriptions": [{"lang": "en", "value": "CAPEC-469 HTTP DoS"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "SEH Computertechnik", "product": "utnserver Pro", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unaffected"}, {"vendor": "SEH Computertechnik", "product": "utnserver ProMAX", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unaffected"}, {"vendor": "SEH Computertechnik", "product": "INU-100", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20.1.22"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html"}, {"url": "http://seclists.org/fulldisclosure/2024/Jun/4"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.", "supportingMedia": [{"type": "text/html", "value": "An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.<p>This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "7d092a75-6bbd-48c6-a15a-0297458009bc", "shortName": "CyberDanube", "dateUpdated": "2024-06-04T08:06:45.294Z"}}}, "cveMetadata": {"cveId": "CVE-2024-5422", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:11:12.739Z", "dateReserved": "2024-05-27T14:10:26.370Z", "assignerOrgId": "7d092a75-6bbd-48c6-a15a-0297458009bc", "datePublished": "2024-06-04T08:06:45.294Z", "assignerShortName": "CyberDanube"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "utnserver Pro", "vendor": "SEH Computertechnik", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "utnserver ProMAX", "vendor": "SEH Computertechnik", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "INU-100", "vendor": "SEH Computertechnik", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "office@cyberdanube.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:seh:utnserver_pro:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "utnserver_pro", "vendor": "seh", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}, {"cpes": ["cpe:2.3:a:seh:utnserver_promax:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "utnserver_promax", "vendor": "seh", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}, {"cpes": ["cpe:2.3:a:seh:inu-100:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "inu-100", "vendor": "seh", "versions": [{"lessThanOrEqual": "20.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below."}, {"lang": "es", "value": "Un consumo incontrolado de recursos de descriptores de archivos en SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 permite DoS a trav\u00e9s de HTTP. Este problema afecta a utnserver Pro, utnserver ProMAX, INU-100 versi\u00f3n 20.1.22 y versiones anteriores."}], "id": "CVE-2024-5422", "lastModified": "2026-06-17T08:15:55.100", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "office@cyberdanube.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-5422", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-06-04T13:55:01.394288Z", "version": "2.0.3"}}]}, "published": "2024-06-04T08:15:11.523", "references": [{"source": "office@cyberdanube.com", "url": "http://seclists.org/fulldisclosure/2024/Jun/4"}, {"source": "office@cyberdanube.com", "url": "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2024/Jun/4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html"}], "sourceIdentifier": "office@cyberdanube.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "office@cyberdanube.com", "type": "Secondary"}]}