{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-03T13:37:28.718","vulnerabilities":[{"cve":{"id":"CVE-2023-29552","sourceIdentifier":"cve@mitre.org","published":"2023-04-25T16:15:09.537","lastModified":"2026-06-17T05:50:32.263","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-28T21:15:30.516372Z","id":"CVE-2023-29552","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-11-08","cisaActionDue":"2023-11-29","cisaRequiredAction":"Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.","cisaVulnerabilityName":"Service Location Protocol (SLP) Denial-of-Service Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*","matchCriteriaId":"A4E8CE0B-23E7-45BF-AAFB-AD12DC7EB0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:sap:*:*","matchCriteriaId":"5D18AA86-88AF-481B-A24F-429BF79264AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:-:*:*","matchCriteriaId":"B1B7847D-6C17-4817-B71E-C034894B70A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*","matchCriteriaId":"C665A768-DBDA-4197-9159-A2791E98A84F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0","matchCriteriaId":"D223DD19-0441-4EBD-9F51-5E9012434517"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:service_location_protocol_project:service_location_protocol:-:*:*:*:*:*:*:*","matchCriteriaId":"64E7C090-F632-4975-9C4C-E89100088BF4"}]}]}],"references":[{"url":"https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://datatracker.ietf.org/doc/html/rfc2608","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"https://github.com/curesec/slpload","source":"cve@mitre.org","tags":["Product"]},{"url":"https://security.netapp.com/advisory/ntap-20230426-0001/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.suse.com/support/kb/doc/?id=000021051","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://datatracker.ietf.org/doc/html/rfc2608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"https://github.com/curesec/slpload","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://security.netapp.com/advisory/ntap-20230426-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.suse.com/support/kb/doc/?id=000021051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}