PT-2025-25338 · Unknown · Absolute Secure Access Server

CVE-2025-49080

·

Publicado

2025-06-12

·

Atualizado

2025-06-23

CVSS v4.0

8.7

Alta

VetorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Absolute Secure Access server versions 9.0 through 13.54
Description The issue is related to a memory management vulnerability. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, and there are no attack requirements, privileges, or user interaction required. Loss of availability is high, with no impact on confidentiality or integrity.
Recommendations For Absolute Secure Access server versions 9.0 through 13.54, update to a version that includes a fix for the memory management vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-49080

Produtos afetados

Absolute Secure Access Server