WEB Arcserve Unified Data Protection ASNative.dll Validate Denial of Service (CVE-2024-0801)

Rule ID

1234773

Severity

Critical

Description

A denial-of-service vulnerability exists in Arcserve Unified Data Protection (UDP). The vulnerability is due to improper validation of username in ASNative.dll. A remote unauthenticated attacker can exploit the vulnerability by sending crafted request to the target application. Successful exploitation could result in denial-of-service conditions in the target application.

Impact

Denial of service

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A