CVE-2025-24341

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Apr 30, 2025
Updated: May 2, 2025
CWE ID 770

Summary

CVE-2025-24341 is a vulnerability affecting the web application of ctrlX OS. This issue enables a remote, low-privileged attacker to trigger a Denial-of-Service (DoS) condition on the device through multiple crafted HTTP requests. In the most severe scenario, the device may require a full power cycle to restore normal functioning. This vulnerability poses a significant risk to the availability of systems utilizing thectrlX OS web application.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share