{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-25075"
      ],
      "details": "An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption. When that happens often enough, the device will be out of memory, i.e., a denial of service.",
      "id": "GSD-2024-25075",
      "modified": "2024-02-05T06:03:25.251832Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-25075",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption. When that happens often enough, the device will be out of memory, i.e., a denial of service."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://industrial.softing.com/fileadmin/psirt/downloads/2024/syt-2024-2.html",
            "refsource": "MISC",
            "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2024/syt-2024-2.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption. When that happens often enough, the device will be out of memory, i.e., a denial of service."
          },
          {
            "lang": "es",
            "value": "Se descubri\u00f3 un problema en Softing uaToolkit Embedded antes de la versi\u00f3n 1.41.1. Cuando se crea una suscripci\u00f3n con un par\u00e1metro MaxNotificationPerPublish muy bajo, se maneja mal una respuesta de publicaci\u00f3n, lo que genera consumo de memoria. Cuando esto sucede con suficiente frecuencia, el dispositivo se quedar\u00e1 sin memoria, es decir, se producir\u00e1 una denegaci\u00f3n de servicio."
          }
        ],
        "id": "CVE-2024-25075",
        "lastModified": "2024-04-03T12:38:04.840",
        "metrics": {},
        "published": "2024-04-02T21:15:45.900",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2024/syt-2024-2.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}