Low Privilege Attackers Can Cause Denial of Service Through Configuration Changes

CVE-2024-43392

Summary

A vulnerability allows a low privileged remote attacker to manipulate the configuration settings of firewall services. Exploitation of this weakness could enable unauthorized modifications to critical elements such as packet filtering, packet forwarding, network access control, and Network Address Translation (NAT). Through the misuse of environment variables like FW_INCOMING.FROM_IP, FW_INCOMING.IN_IP, FW_OUTGOING.FROM_IP, and FW_OUTGOING.IN_IP, an attacker may introduce disruptions, leading to a denial of service condition that impacts the availability of the network infrastructure.

References