CVE-2024-25407

Name of the Vulnerable Software and Affected Versions SteVe version 3.6.0

Description The issue is related to SteVe using predictable transaction ID's when receiving a StartTransaction request. This can allow attackers to cause a Denial of Service (DoS) by using the predicted transaction ID's to terminate other transactions. The StartTransaction request is the endpoint where this issue is observed.

Recommendations For SteVe version 3.6.0, as a temporary workaround, consider restricting access to the StartTransaction request until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.