Vulnerability record · CVE-2024-2758 · published 3 April 2024

CVE-2024-2758: Tempesta FW rate limits are not enabled by default.

Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.

6.3 CVSS 3.1 Medium EPSS 73% · top 0.6% Deferred

6.3CVSS 3.1 base score

73%EPSS exploitation probability, 30 days

NoNot in CISA KEV

0Affected product versions listed by NVD

6References

17 Jun 2026Last modified by NVD

Description

Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

Link	Tags
http://www.openwall.com/lists/oss-security/2024/04/03/16
https://github.com/tempesta-tech/tempesta/security/advisories/GHSA-3xwj-5ch3-q9p4
https://www.kb.cert.org/vuls/id/421644
http://www.openwall.com/lists/oss-security/2024/04/03/16
https://github.com/tempesta-tech/tempesta/security/advisories/GHSA-3xwj-5ch3-q9p4
https://www.kb.cert.org/vuls/id/421644

Track CVE-2024-2758 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2024-2758), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.