CVE Vulnerability Advisory Database

[Affected Scope] Cisco ASA and FTD Software with Remote Access SSL VPN enabled and secondary authentication configured.

[Impact] Unauthenticated remote attackers can trigger an unexpected device reload, leading to a complete Denial of Service (DoS) of VPN services.

[Mitigation] Apply the latest security patches from Cisco immediately; review secondary authentication configurations if patching is delayed.

[Affected Scope] NetScaler ADC and Gateway versions prior to 14.1-73.41 and 13.1-64.28.

[Impact] Unauthenticated remote attackers can cause a Denial of Service (DoS) and system crash by sending specially crafted packets.

[Mitigation] Immediately apply the latest security patches provided by Citrix.

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific patched releases.

[Impact] Unauthenticated attackers can exploit the bandwidth test (btest) feature to leak kernel memory or cause a Denial of Service (DoS) via kernel restart.

[Mitigation] Apply security patches (6.49.21, 7.23.4, 7.24.2 or later) and disable the bandwidth test server.

[Affected Scope] Cisco Secure Firewall ASA and FTD Software with Remote Access SSL VPN service enabled

[Impact] Unauthenticated, remote attackers can cause an unexpected device reload, leading to a complete Denial of Service (DoS) condition

[Mitigation] Immediately upgrade to the patched software versions recommended in the Cisco Security Advisory

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow, leading to unpredictable behavior, Denial of Service (DoS), or potential Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by Citrix and restrict external access to affected virtual servers

[Affected Scope] SolarWinds Serv-U file transfer server versions prior to 15.5.4 Hotfix 1

[Impact] Unauthenticated remote attackers can crash the Serv-U service instantly by sending specially crafted HTTP POST requests utilizing 'Content-Encoding: deflate'

[Mitigation] Immediately apply the official security patch (15.5.4 Hotfix 1 or later) or implement WAF rules to block specific compression headers

[Affected Scope] All Windows and Windows Server systems utilizing the Microsoft Defender Antimalware Engine.

[Impact] Unauthenticated remote attackers can crash the real-time protection engine, disabling endpoint security defenses and leaving the system exposed to subsequent attacks.

[Mitigation] Immediately update the Microsoft Defender engine to the latest version (1.1.24000.0 or higher) and verify automatic update configurations.

[Affected Scope] Windows and Windows Server operating systems utilizing the Windows Remote Access Connection Manager (RasMan) service.

[Impact] An unauthorized local attacker can trigger a Null Pointer Dereference in the RasMan service, causing a local Denial of Service (DoS) by crashing the service or the entire system.

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service if remote access features are not required.

[Affected Scope] Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software with Remote Access VPN enabled

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted VPN-related URL endpoints, and active exploit variants can trigger unexpected device reloads, causing a complete Denial of Service (DoS)

[Mitigation] Immediately upgrade to the fixed software releases recommended in the official Cisco Security Advisory

[Affected Scope] Palo Alto Networks PAN-OS software versions with the DNS Security feature enabled

[Impact] An unauthenticated remote attacker can send malicious packets through the data plane, causing the firewall to reboot. Repeated exploitation forces the device into maintenance mode, leading to a complete network outage

[Mitigation] Immediately upgrade PAN-OS to the patched versions recommended by the vendor, and review DNS Security profile configurations as a temporary measure

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with Remote Access VPN (RAVPN) service enabled

[Impact] Unauthenticated, remote attackers can exhaust system resources by flooding VPN authentication requests, leading to a Denial of Service (DoS) of the RAVPN service and potentially requiring a device reload

[Mitigation] Apply official Cisco security patches immediately, configure connection rate limiting, and block malicious brute-force IP addresses

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances running vulnerable firmware versions

[Impact] Unauthenticated remote attackers can trigger a Denial of Service (DoS) state or perform Out-Of-Bounds Memory Reads to access sensitive data

[Mitigation] Immediately upgrade to the latest patched firmware versions recommended by Citrix and restrict external access

[Affected Scope] KNX-based smart home and building automation devices supporting KNX Connection Authorization and Option 1

[Impact] Attackers can set an unauthorized BCU key via network or physical access, permanently locking and bricking the device (Denial of Service)

[Mitigation] Restrict network exposure of KNX IP interfaces, enable KNX Secure features, and enforce strict physical access controls

[Affected Scope] .NET 6.0, .NET 7.0, ASP.NET Core, and Microsoft Visual Studio 2022 environments

[Impact] Unauthenticated remote attackers can trigger resource exhaustion (CPU/Memory) via crafted HTTP requests, leading to a complete Denial of Service (DoS)

[Mitigation] Immediately update the .NET SDK/Runtime and Visual Studio to the latest patched versions

[Affected Scope] Arm Trusted Firmware-M (TF-M) versions up to and including 1.2, deployed on IoT and embedded hardware

[Impact] Non-secure world (NSPE) attackers can trigger system halts, overwrite secure data, or leak sensitive secure domain information

[Mitigation] Upgrade the TF-M source code to a patched version (v1.3.0 or higher), rebuild, and flash the firmware

[Affected Scope] Android and embedded devices powered by Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables chipsets

[Impact] A local attacker can trigger GPU memory allocation failures, leading to system resource exhaustion and a complete Denial of Service (DoS) on the affected device

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs (Samsung, Google, etc.) in or after May 2021

[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled

[Impact] An unauthenticated, remote attacker can cause an immediate crash of the IGMP process or exhaust system memory, leading to instability in critical routing protocols and denial of service (DoS)

[Mitigation] Apply official Cisco software updates, disable DVMRP multicast routing where not required, or implement IGMP packet filtering ACLs

[Affected Scope] FortiOS versions 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier, and FortiProxy versions 2.0.0, 1.2.8 and earlier with SSL VPN web portal enabled

[Impact] Remote attackers can trigger a heap buffer overflow by forcing the proxy to process malicious javascript href data, leading to the termination of the SSL VPN web service and disconnection of active user sessions

[Mitigation] Immediately upgrade FortiOS and FortiProxy firmware to patched versions, or temporarily disable the SSL VPN web portal feature and restrict access to trusted source IPs

[Affected Scope] Cisco ASA Software and Cisco FTD Software running on devices with enabled web interfaces (SSL VPN, AnyConnect, Clientless Portal, etc.)

[Impact] Unauthenticated, remote attackers can trigger an unexpected device reload (DoS) or view sensitive system information without authentication via directory traversal

[Mitigation] Apply official software updates from Cisco immediately, restrict web interface access using ACLs, or disable unnecessary HTTP services

[Affected Scope] Cisco devices running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later with Login Enhancements (Login Block) enabled

[Impact] An unauthenticated, remote attacker can trigger an unexpected system reload, leading to a complete Denial of Service (DoS) condition

[Mitigation] Apply the official Cisco IOS software updates, or temporarily disable the 'login block-for' feature and restrict virtual terminal (vty) access using infrastructure ACLs