CVE-2024-25407: Steve-Community Steve

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service (DoS) by using the predicted transaction ID's to terminate other transactions.

Affected products

• Steve-Community Steve: version 3.6.0 only

Published 2024-02-13. Last modified 2026-06-17.