title: Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5
description: Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara AX 3.8.1, before Niagara 4.1.
problem types: CWE-400 Uncontrolled Resource Consumption
affected:
{
defaultStatus: unaffected
platforms: [Windows, Linux, QNX]
product: Niagara Framework
vendor: Honeywell
versions:
lessThan: Niagara AX 3.8.1, status: affected, version: 0, versionType: semver
lessThan: Niagara 4.1, status: affected, version: 0, versionType: semver
}
metrics:
cvssV2_0: [
accessComplexity: LOW
accessVector: NETWORK
authentication: NONE
availabilityImpact: PARTIAL
baseScore: 6.4
confidentialityImpact: NONE
integrityImpact: PARTIAL
vectorString: AV:N/AC:L/Au:N/C:N/I:P/A:P
version: 2.0
]
format: CVSS
scenarios: GENERAL