CVE-2023-29552

highpriority · act · 90KEV · exploitedEPSS 0.640 · 99 %ileEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

64.0% (99th) EPSS

CVSS 7.5 · high

Is it mine?

17 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

added 2023-11-08remediate by 2023-11-29

required action Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.

EPSS · scored 2026-10-21

Service Location Protocol (SLP) Denial-of-Service Vulnerability

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.18.6highAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-406US

affected products (17)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Novell Inc. SUSE Linux Enterprise≤ Server for SAP Applications 15fstec_bduRU
Novell Inc. SUSE Linux Enterprise≤ Server for SAP Application 12fstec_bduRU
Novell Inc. SUSE Linux Enterprise≤ Server 15fstec_bduRU
Novell Inc. SUSE Linux Enterprise≤ Server 11fstec_bduRU
Novell Inc. SUSE Linux Enterprise≤ Server 12fstec_bduRU
Novell Inc. SUSE Manager Serverall versionsfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 6fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 9fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7fstec_bduRU
netapp smi-s providerall versionsnvdUScpe:2.3:a:netapp:smi-s_provider:*:*:*:*:*:*:*:*
service location protocol project service location protocolall versionsnvdUScpe:2.3:a:service_location_protocol_project:service_location_protocol:*:*:*:*:*:*:*:*
suse linux enterprise server= 11nvdUScpe:2.3:o:suse:linux_enterprise_server:*:*:*:*:*:*:*:*
suse linux enterprise server= 12nvdUScpe:2.3:o:suse:linux_enterprise_server:*:*:*:*:*:*:*:*
suse linux enterprise server= 15nvdUScpe:2.3:o:suse:linux_enterprise_server:*:*:*:*:*:*:*:*
suse manager serverall versionsnvdUScpe:2.3:a:suse:manager_server:*:*:*:*:*:*:*:*
vmware esxi< 7.0nvdUScpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2023-04-25modified 2026-06-17

references (28)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan