CVE Catalog

CVE-1999-1515

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
4.64%

91th percentile - higher than 91% of all known CVEs

Summary

A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.

Risk Assessment

An attacker can overload the system, leading to service unavailability for users.

Recommendation

It is recommended to review and adjust the configuration of TenFour TFS Gateway to prevent such attacks.

Original NVD description (English source)

A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS