CVE-2023-31289: 
Pexip Infinity Management Node vulnerability analysis and mitigation

Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort. The vulnerability was assigned CVE-2023-31289 and was disclosed on December 25, 2023. This security flaw affects all versions of Pexip Infinity prior to version 31.2 (NVD, CVE).

The vulnerability is classified as an Improper Input Validation (CWE-20) issue. It received a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating that it can be exploited remotely with low attack complexity, requires no privileges or user interaction, and primarily affects system availability (NVD).

The primary impact of this vulnerability is on system availability. When successfully exploited, the vulnerability allows remote attackers to trigger a software abort, resulting in a denial of service condition (NVD).

The primary resolution for this vulnerability is to upgrade to Pexip Infinity version 31.2 or later. No alternative mitigations or workarounds have been documented (Pexip Docs).