CVE-2024-23985

Summary

CVE-2024-23985 is a newly identified vulnerability affecting EzServer version 6.4.017. This issue allows an attacker to cause a denial of service by sending a long string as a valid argument to the RNTO command. The vulnerability results in a daemon crash, rendering the server unresponsive and unable to process requests. This can lead to significant downtime and disruption of services. It is crucial that affected organizations apply the necessary patches or upgrades to mitigate this vulnerability and prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.