CVE-2024-5052: Resource consumption vulnerability in Cerberus FTP Enterprise
Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, attempts to process a large number of incomplete HTTP requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cerberus FTP Enterpriseto a version that resolves this vulnerability.Fixed in 12.11.6 - Configuration
Enable the 'Allow Remote SOAP Access' feature only when necessary for legitimate SOAP clients.
Cerberus Enterprise 8.0.10.3 web administration / SOAP Allow Remote SOAP Access = enable only when necessary - Configuration
Configure access restrictions and authentication settings to limit access to authorized users.
Cerberus SOAP access controls access restrictions and authentication settings = configure to limit access to authorized users - Compensating control
Restrict access to the SOAP port 10001 using external firewall rules.
- Compensating control
Whitelist only trusted IPs for access to SOAP port 10001.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5052?
CVE-2024-5052 is classified as a Denial of Service (DoS) vulnerability.
How do I fix CVE-2024-5052?
To fix CVE-2024-5052, ensure that you update Cerberus FTP Enterprise to the latest version that addresses this vulnerability.
What software is affected by CVE-2024-5052?
CVE-2024-5052 affects Cerberus FTP Enterprise version 8.0.10.3.
What symptoms indicate an exploitation of CVE-2024-5052?
Symptoms of CVE-2024-5052 exploitation may include service interruptions and slow response times due to incomplete HTTP requests.
How can I mitigate the risks of CVE-2024-5052?
Mitigation strategies for CVE-2024-5052 include implementing rate limiting on HTTP requests and monitoring for unusual traffic patterns.