Description

Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain deselect actions.

Classification

CVE ID: CVE-2024-57375

CVSS Base Severity: LOW

CVSS Base Score: 2.4

CVSS Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor: Andamiro

Product: Pump It Up

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.02% (probability of being exploited)

EPSS Percentile: 4.37% (scored less or equal to compared to others)

EPSS Date: 2025-05-24 (when was this score calculated)

Stakeholder-Specific Vulnerability Categorization (SSVC)

SSVC Exploitation: none

SSVC Technical Impact: partial

SSVC Automatable: false

References

https://nvd.nist.gov/vuln/detail/CVE-2024-57375
https://xx.piugame.com/bbs/board.php?bo_table=global_notice&wr_id=368
https://www.youtube.com/watch?v=DXrnQpTlQs0

Timeline