Low Privileged Remote Attackers Can Cause Denial of Service (DoS) Through Configuration Changes of the Firewall Service

CVE-2024-43390

Summary

A vulnerability exists in the Network Security Appliance from ABC Corp that allows a low privileged remote attacker to alter firewall configurations. By exploiting the FW_NAT.IN_IP environment variable, the attacker can manipulate critical settings such as packet forwarding or Network Address Translation (NAT). This manipulation may lead to potential denial of service, disrupting normal operations and affecting network integrity. Immediate remediation is essential to safeguard against unauthorized access and ensure the continued reliability of the affected firewall services.

References