CVE-2024-45234

Summary

CVE-2024-45234 is a vulnerability affecting Fort versions prior to 1.6.3, which allows a malicious RPKI repository to bypass the system's BER decoder, potentially causing a panic in the code. This issue can lead to Route Origin Validation being unavailable, posing a significant risk of compromised routing for organizations relying on Fort as an RPKI Relying Party. The vulnerability has an exploitability score of 3.9 and a base severity rating of HIGH, indicating that it can be exploited over the network without requiring user interaction or special privileges. To remediate this vulnerability, organizations should upgrade their Fort software to version 1.6.3 or later. Failure to address this issue may result in operational disruptions and security risks in network routing processes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.