What is CVE-2024-52060?

CVE-2024-52060 is a high-severity vulnerability in Rti Connext Professional, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.8/10. Published 2024-12-13.

How severe is CVE-2024-52060?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2024-52060 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Rti Connext Professional

CVE-2024-52060

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer…

Vulnerability class: Buffer Overflow

EPSS: 0.003 (23.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Rti Connext Professional — versions 7.0.0, 6.1.0, 6.0.0
Rti Connext_professional

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

3f572a00-62e2-4423-959a-7ea25eff1638 (Vendor Advisory)

Frequently asked questions

What is CVE-2024-52060?: CVE-2024-52060 is a high-severity vulnerability in Rti Connext Professional, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.8/10. Published 2024-12-13.
How severe is CVE-2024-52060?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2024-52060 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.