CVE-2024-34947
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:LSummary
CVE-2024-34947 is a critical-severity Incorrectly Specified Destination in a Communication Channel (CWE-941) vulnerability. Its CVSS base score is 9.4 (Critical).
Operationally, ranked at the 32th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified map to AC-4 (Information Flow Enforcement) and SC-7 (Boundary Protection) — see the control section below for these in your framework.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-35123
Vulnerability Data
Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Information flow enforcement policies can require that outgoing channels only connect to approved, correctly-specified destinations.
Boundary protection at managed interfaces can enforce that communications are directed only to authorized external endpoints.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Hardened configuration baselines and change control prevent mis-specified endpoints from being deployed.
Network monitoring can detect traffic to wrong destinations but does not prevent the specification error itself.
Documented network data-flow diagrams directly reduce the chance of specifying an incorrect destination address.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing can detect incorrect destinations, yet it is a detection rather than prevention control.
Network security controls enforce correct endpoint validation and routing, directly preventing mis-specified destinations.
Security of network services includes service endpoint verification, mitigating incorrect destination specification.
Network segregation reduces exposure but does not address destination specification within allowed segments.
Secure SDLC practices can catch destination errors during design, but coverage is indirect.
Application security requirements may mandate destination validation, yet the control is high-level.