CVE-2024-5052
Assigner: INCIBE
Published: 2024-05-17T09:40:02.877Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Cerberus FTP Enterprise
vendor: Cerberus FTP Enterprise
versions: status: affected
version: 8.0.10.3
credits: type: finder
value: Rafael Pedrero
datePublic: 2024-05-17T08:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, attempts to process a large number of incomplete HTTP requests.
value: Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, attempts to process a large number of incomplete HTTP requests.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: This vulnerability has been resolved by Cerberus in version 12.11.6, released on 02/17/2023. To ensure the security and uninterrupted operation of the Cerberus FTP server, the manufacturer recommends the following mitigation measures: Update to the latest supported version: Customers are recommended to always update to the latest supported version of the Cerberus FTP server. This ensures access to the latest security enhancements and features, along with protection against known vulnerabilities. Secure access to SOAP port 10001: Customers can protect access to SOAP port 10001 using Cerberus configuration settings. It is recommended to configure access restrictions and authentication settings to limit access to authorized users. In addition, the use of external firewall rules to restrict access to SOAP port 10001 is advised. It is recommended that clients whitelist only trusted IPs with access to this port. Enable remote SOAP access if necessary: It is recommended that customers enable the "Allow Remote SOAP Access" feature only when necessary for legitimate SOAP clients. This practice minimizes the attack surface and reduces the risk of unauthorized access.
value: This vulnerability has been resolved by Cerberus in version 12.11.6, released on 02/17/2023. To ensure the security and uninterrupted operation of the Cerberus FTP server, the manufacturer recommends the following mitigation measures: Update to the latest supported version: Customers are recommended to always update to the latest supported version of the Cerberus FTP server. This ensures access to the latest security enhancements and features, along with protection against known vulnerabilities. Secure access to SOAP port 10001: Customers can protect access to SOAP port 10001 using Cerberus configuration settings. It is recommended to configure access restrictions and authentication settings to limit access to authorized users. In addition, the use of external firewall rules to restrict access to SOAP port 10001 is advised. It is recommended that clients whitelist only trusted IPs with access to this port. Enable remote SOAP access if necessary: It is recommended that customers enable the "Allow Remote SOAP Access" feature only when necessary for legitimate SOAP clients. This practice minimizes the attack surface and reduces the risk of unauthorized access.
source: discovery: EXTERNAL
title: Resource consumption vulnerability in Cerberus FTP Enterprise
x_generator: engine: Vulnogram 0.2.0