CVE-2024-25656: Avsystem Unified Management Platform

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper input validation in AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS can result in unauthenticated CPE (Customer Premises Equipment) devices storing arbitrarily large amounts of data during registration. This can potentially lead to DDoS attacks on the application database and, ultimately, affect the entire product.

Affected products

• Avsystem Unified Management Platform: version 23.07.0.16567 only

Published 2024-03-18. Last modified 2026-06-17.