TI-2024-05038 Aliases CVE-2024-5422 GHSA-78m4-c73f-766m

Denial of service in SEH Computertechnik utnserver Pro

LOW 32CWE-400Published 2024-06-04 · Updated 2025-02-13

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00665 52nd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SEH Computertechnik	utnserver Pro	up to 20.1.22	—	No fix listed	CNA
SEH Computertechnik	utnserver ProMAX	up to 20.1.22	—	No fix listed	CNA
SEH Computertechnik	INU-100	up to 20.1.22	—	No fix listed	CNA

utnserver Pro VendorSEH Computertechnik Affected up to 20.1.22 Fixed in — No fix listed CNA
utnserver ProMAX VendorSEH Computertechnik Affected up to 20.1.22 Fixed in — No fix listed CNA
INU-100 VendorSEH Computertechnik Affected up to 20.1.22 Fixed in — No fix listed CNA

CPE names CISA-ADP · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:seh:utnserver_pro:-:::::::*	not specified by CISA-ADP	—	Seh
cpe:2.3:a:seh:utnserver_promax:-:::::::*	not specified by CISA-ADP	—	Seh
cpe:2.3:a:seh:inu-100:-:::::::*	not specified by CISA-ADP	—	Seh

cpe:2.3:a:seh:utnserver_pro:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Seh
cpe:2.3:a:seh:utnserver_promax:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Seh
cpe:2.3:a:seh:inu-100:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Seh

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-5422
2026-10-03 Alias added: GHSA-78m4-c73f-766m
2026-10-04 EPSS moved to the 50th–90th percentile

References

Other 2

TI-2024-10471 Multiple Stored Cross-Site Scripting CVSS 4.0MEDIUM 5.1
TI-2024-05037 Authenticated command injection in SEH Computertechnik utnserver Pro CVSS 4.0HIGH 8.7
TI-2024-05036 Stored Cross-Site Scripting in SEH Computertechnik utnserver Pro CVSS 4.0HIGH 8.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences