The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added an actively exploited high-severity vulnerability in the Service Location Protocol (SLP) to their Known Exploited Vulnerabilities (KEV) catalog. SLP enables systems on a local area network (LAN) to discover and enable generic hardware and software services such as those for printers or file/email servers. The flaw, tracked as CVE-2023-29552, received a CVSS score of 7.5/10 and allows for denial-of-service (DoS) attacks if successfully exploited. This vulnerability also allows for DoS amplification attacks, significantly threatening networks by allowing attackers to register services and send spoofed UDP traffic. While the specific details of the exploitation are unknown at this time, the threat is severe enough that all federal civilian executive branch (FCEB) agencies are mandated to implement mitigation techniques, such as disabling the SLP service on systems within untrusted networks by no later than November 29, 2023. CTIX analysts will continue to follow the exploitation of this vulnerability and provide updates when applicable.