PT-2025-25338 · Unknown · Absolute Secure Access Server

Published 2025-06-12 · Updated 2025-06-23 · CVE-2025-49080

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Absolute Secure Access server versions 9.0 through 13.54

Description The issue is related to a memory management vulnerability. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, and there are no attack requirements, privileges, or user interaction required. Loss of availability is high, with no impact on confidentiality or integrity.

Recommendations For Absolute Secure Access server versions 9.0 through 13.54, update to a version that includes a fix for the memory management vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-762

Related Identifiers

CVE-2025-49080

Affected Products

Absolute Secure Access Server

References · 10

• https://absolute.com/platform/security-information/vulnerability-archive/cve-2025-49080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49080 · Security Note
• https://osv.dev/vulnerability/CVE-2025-49080 · Vendor Advisory
• https://t.me/cvenotify/125781 · Telegram Post
• https://t.me/cvetracker/26111 · Telegram Post
• https://t.me/cvenotify/126387 · Telegram Post
• https://twitter.com/dailycve/status/1937169646316052868 · Twitter Post
• https://twitter.com/CveFindCom/status/1933217813625258368 · Twitter Post
• https://t.me/latest_high_impact_cve/2631 · Telegram Post
• https://twitter.com/CVEnew/status/1933211520445415841 · Twitter Post