{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-5052", "assignerOrgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516", "state": "PUBLISHED", "assignerShortName": "INCIBE", "dateReserved": "2024-05-17T07:01:59.602Z", "datePublished": "2024-05-17T09:40:02.877Z", "dateUpdated": "2024-06-04T18:02:09.383Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Cerberus FTP Enterprise", "vendor": "Cerberus FTP Enterprise", "versions": [{"status": "affected", "version": "8.0.10.3"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Rafael Pedrero"}], "datePublic": "2024-05-17T08:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, attempts to process a large number of incomplete HTTP requests."}], "value": "Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, attempts to process a large number of incomplete HTTP requests."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516", "shortName": "INCIBE", "dateUpdated": "2024-05-17T09:40:02.877Z"}, "references": [{"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/resource-consumption-vulnerability-cerberus-ftp-enterprise"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "This vulnerability has been resolved by Cerberus in version 12.11.6, released on 02/17/2023. To ensure the security and uninterrupted operation of the Cerberus FTP server, the manufacturer recommends the following mitigation measures: Update to the latest supported version: Customers are recommended to always update to the latest supported version of the Cerberus FTP server. This ensures access to the latest security enhancements and features, along with protection against known vulnerabilities. Secure access to SOAP port 10001: Customers can protect access to SOAP port 10001 using Cerberus configuration settings. It is recommended to configure access restrictions and authentication settings to limit access to authorized users. In addition, the use of external firewall rules to restrict access to SOAP port 10001 is advised. It is recommended that clients whitelist only trusted IPs with access to this port. Enable remote SOAP access if necessary: It is recommended that customers enable the \"Allow Remote SOAP Access\" feature only when necessary for legitimate SOAP clients. This practice minimizes the attack surface and reduces the risk of unauthorized access."}], "value": "This vulnerability has been resolved by Cerberus in version 12.11.6, released on 02/17/2023. To ensure the security and uninterrupted operation of the Cerberus FTP server, the manufacturer recommends the following mitigation measures: Update to the latest supported version: Customers are recommended to always update to the latest supported version of the Cerberus FTP server. This ensures access to the latest security enhancements and features, along with protection against known vulnerabilities. Secure access to SOAP port 10001: Customers can protect access to SOAP port 10001 using Cerberus configuration settings. It is recommended to configure access restrictions and authentication settings to limit access to authorized users. In addition, the use of external firewall rules to restrict access to SOAP port 10001 is advised. It is recommended that clients whitelist only trusted IPs with access to this port. Enable remote SOAP access if necessary: It is recommended that customers enable the \"Allow Remote SOAP Access\" feature only when necessary for legitimate SOAP clients. This practice minimizes the attack surface and reduces the risk of unauthorized access."}], "source": {"discovery": "EXTERNAL"}, "title": "Resource consumption vulnerability in Cerberus FTP Enterprise", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-5052", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-17T15:56:17.359522Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:cerberus:cerberus_ftp_server:8.0.10.3:*:*:*:*:*:*:*"], "vendor": "cerberus", "product": "cerberus_ftp_server", "versions": [{"status": "affected", "version": "8.0.10.3"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T18:02:09.383Z"}}]}}

{"descriptions": [{"lang": "en", "value": "Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, attempts to process a large number of incomplete HTTP requests."}], "id": "CVE-2024-5052", "lastModified": "2024-05-17T18:35:35.070", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "cve-coordination@incibe.es", "type": "Secondary"}]}, "published": "2024-05-17T10:15:14.620", "references": [{"source": "cve-coordination@incibe.es", "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/resource-consumption-vulnerability-cerberus-ftp-enterprise"}], "sourceIdentifier": "cve-coordination@incibe.es", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "cve-coordination@incibe.es", "type": "Primary"}]}

{}