cveboard RSS feed

CVE-2024-9358

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

ThingsBoard HTTP RPC API resource consumption

A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.7.1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was informed on 2024-07-24 about this vulnerability and announced the release of 3.7.1 for the second half of September 2024.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ThingsBoard

Vendor
n/a
Product
ThingsBoard
Platforms
Unknown
Default status
Unknown
ThingsBoard · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.0affectedUnavailableUnavailableUnavailableNone listed
3.1affectedUnavailableUnavailableUnavailableNone listed
3.2affectedUnavailableUnavailableUnavailableNone listed
3.3affectedUnavailableUnavailableUnavailableNone listed
3.4affectedUnavailableUnavailableUnavailableNone listed
3.5affectedUnavailableUnavailableUnavailableNone listed
3.6affectedUnavailableUnavailableUnavailableNone listed
3.7affectedUnavailableUnavailableUnavailableNone listed