PT-2025-25338 · Unknown · Absolute Secure Access Server
CVE-2025-49080
·
Publicado
2025-06-12
·
Atualizado
2025-06-23
CVSS v4.0
8.7
Alta
| Vetor | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Absolute Secure Access server versions 9.0 through 13.54
Description
The issue is related to a memory management vulnerability. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, and there are no attack requirements, privileges, or user interaction required. Loss of availability is high, with no impact on confidentiality or integrity.
Recommendations
For Absolute Secure Access server versions 9.0 through 13.54, update to a version that includes a fix for the memory management vulnerability.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Absolute Secure Access Server