The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert announcing the addition of a new known exploited vulnerability to its catalog. The specific vulnerability, labeled CVE-2023-29552, is related to a Service Location Protocol (SLP) Denial-of-Service Vulnerability. These types of vulnerabilities are commonly targeted by malicious cyber actors and present significant risks to the federal enterprise.
While CISA’s Binding Operational Directive 22-01 (BOD 22-01) primarily applies to Federal Civilian Executive Branch (FCEB) agencies, CISA strongly recommends that all organizations prioritize the timely remediation of catalog vulnerabilities to reduce their exposure to cyberattacks and enhance overall cybersecurity. CISA will continue to expand the catalog with vulnerabilities meeting specified criteria, maintaining vigilance in addressing potential threats.
Reference: