Description
There is a memory management vulnerability in Absolute
Secure Access server versions 9.0 to 13.54. Attackers with network access to
the server can cause a Denial of Service by sending a specially crafted
sequence of packets to the server. The attack complexity is low, there are no
attack requirements, privileges, or user interaction required. Loss of
availability is high; there is no impact on confidentiality or integrity.
Published: 2025-06-12
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-18200 There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, there are no attack requirements, privileges, or user interaction required. Loss of availability is high; there is no impact on confidentiality or integrity.
History

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00055}

 epss

{'score': 0.0006}

Mon, 23 Jun 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Absolute
Absolute secure Access
CPEs cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*
Vendors & Products Absolute
Absolute secure Access
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Tue, 17 Jun 2025 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-762
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Jun 2025 17:15:00 +0000

Type Values Removed Values Added
Description There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, there are no attack requirements, privileges, or user interaction required. Loss of availability is high; there is no impact on confidentiality or integrity.
Title Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Absolute Secure Access
cve-icon MITRE

Status: PUBLISHED

Assigner: Absolute

Published:

Updated: 2025-06-17T18:17:08.994Z

Reserved: 2025-05-30T18:23:44.238Z

Link: CVE-2025-49080

cve-icon Vulnrichment

Updated: 2025-06-12T17:13:48.634Z

cve-icon NVD

Status : Analyzed

Published: 2025-06-12T17:15:29.193

Modified: 2025-06-23T14:09:31.560

Link: CVE-2025-49080

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses