CVE-2024-23688

CVE-2024-23688 affects Consensys Discovery versions less than 0.4.5, stemming from the reuse of an AES/GCM nonce for an entire session instead of generating a unique one per message. This medium-severity vulnerability (CVSS 5.3) allows an unauthenticated attacker to compromise the session key for specific peer communication, potentially leading to a loss of confidentiality. While the node's private key remains secure, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.