CVE-2024-52060

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

B

uffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.1.45.

References

Link	Resource
https://www.rti.com/vulnerabilities/#cve-2024-52060	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:rti:connext_professional::::::::
	cpe:2.3:a:rti:connext_professional::::::::
	cpe:2.3:a:rti:connext_professional::::::::
	cpe:2.3:a:rti:connext_professional::::::::

History

02 Oct 2025, 13:36

Type	Values Removed	Values Added
CPE		cpe:2.3:a:rti:connext_professional::::::::
References	~~() https://www.rti.com/vulnerabilities/#cve-2024-52060 -~~	() https://www.rti.com/vulnerabilities/#cve-2024-52060 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8
First Time		Rti connext Professional Rti

13 Dec 2024, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-13 11:15

Updated : 2025-10-02 13:36

NVD link : CVE-2024-52060

Mitre link : CVE-2024-52060

CVE.ORG link : CVE-2024-52060

JSON object : View

Products Affected

connext_professional

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2024-52060", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "3f572a00-62e2-4423-959a-7ea25eff1638", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2024-12-13T11:15:08.250", "references": [{"url": "https://www.rti.com/vulnerabilities/#cve-2024-52060", "tags": ["Vendor Advisory"], "source": "3f572a00-62e2-4423-959a-7ea25eff1638"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "3f572a00-62e2-4423-959a-7ea25eff1638", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.1.45."}, {"lang": "es", "value": "La vulnerabilidad de copia de b\u00fafer sin comprobar el tama\u00f1o de la entrada ('desbordamiento de b\u00fafer cl\u00e1sico') en RTI Connext Professional (servicio de enrutamiento, servicio de grabaci\u00f3n, servicio de cola, servicio de recopilaci\u00f3n de observabilidad, servicio de descubrimiento en la nube) permite un desbordamiento de b\u00fafer a trav\u00e9s de variables de entorno. Este problema afecta a Connext Professional: desde 7.0.0 antes de 7.3.0.5, desde 6.1.0 antes de 6.1.2.21, desde 6.0.0 antes de 6.0.*, desde 5.3.0 antes de 5.3.1.45."}], "lastModified": "2025-10-02T13:36:45.580", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77547706-1451-412D-A99A-3D01A7E1DB9E", "versionEndExcluding": "5.3.1.45", "versionStartIncluding": "5.3.0"}, {"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8FE0AD3-A12C-4A7F-BE66-725B7B941176", "versionEndExcluding": "6.0.1.40", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F6B4325-F208-482A-B0FF-56FD3DEFB35A", "versionEndExcluding": "6.1.2.21", "versionStartIncluding": "6.1.0"}, {"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73826C13-CDA4-453A-AE9A-B94AF1A9F63E", "versionEndExcluding": "7.3.0.5", "versionStartIncluding": "7.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "3f572a00-62e2-4423-959a-7ea25eff1638"}