
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2024-56073 affects FastNetMon Community Edition through version 1.2.7. The vulnerability was discovered and disclosed on December 14, 2024. The issue involves zero-length templates for Netflow v9 that allow remote attackers to cause a denial of service condition through a divide-by-zero error, resulting in application crash (NVD).
The vulnerability is classified as CWE-369 (Divide By Zero) and has received a CVSS v3.1 base score of 7.5 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue occurs when processing Netflow v9 templates with zero length, which leads to a division by zero error in the application's logic (NVD, MITRE CWE).
When exploited, this vulnerability can cause a denial of service condition through application crash, affecting the availability of the FastNetMon service. The impact is particularly significant as it can be triggered remotely without requiring authentication (NVD).
A fix has been implemented in the FastNetMon repository that explicitly blocks zero-length data templates for Netflow v9. The patch includes validation checks to prevent division by zero errors in the Netflow v9 logic (GitHub Commit).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."