← CVE Intelligence

CVE-2024-1064

Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 PUBLISHED

Description (CNA)

A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header

Affected (CNA)

Vendor / productVersions
Arcadia Technology, LLC / Crafty Controlleraffected 4.0.0 through 4.2.2

CWE

CWE-644

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.