Low Privileged Remote Attackers Can Cause DoS Through Config Changes

CVE-2024-43393

Summary

A vulnerability exists in Vendor X's firewall services that enables a low privileged remote attacker to execute configuration changes impacting critical functionalities such as packet filtering, packet forwarding, and network access control. Specific manipulation of environment variables, including FW_INCOMING.FROM_IP and FW_OUTGOING.IN_IP, can expose the firewall to potential denial-of-service (DoS) conditions, disrupting normal operational capabilities.

References