CVE-2024-49823

Summary

CVE-2024-49823 is a denial-of-service vulnerability affecting IBM Common Cryptographic Architecture versions 7.0.0 through 7.5.51. An authenticated user can trigger this issue by sending a specifically crafted sequence of valid requests to the Hardware Security Module (HSM). The vulnerability does not involve any unauthorized access or data disclosure, but it can cause the HSM to become unresponsive, leading to a denial-of-service condition. IBM has released patches to address this issue, and users are strongly encouraged to apply them to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.