HTTP DoS Vulnerability in Kron Technologies Kron PAM Affects User Resources
CVE-2025-5253

6.5MEDIUM

Key Information:

Vendor: Kron Technologies
Status: Kron Pam
Vendor: CVE Published:; 25 July 2025

🔔 Create Kron Technologies Vulnerability Alert

What is CVE-2025-5253?

A resource allocation vulnerability in Kron Technologies' Kron PAM software could allow attackers to exploit the system by launching HTTP Denial of Service (DoS) attacks. This flaw affects versions prior to 3.7, enabling potential disruptions to users by overwhelming available resources without proper throttling mechanisms.

Affected Version(s)

Kron PAM 0 < 3.7

References

https://www.usom.gov.tr/bildirim/tr-25-0178

third-party-advisory

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 25, 2025
Vulnerability Reserved
May 27, 2025

Credit

Taha Yildirim

Türk Telekom