Vulnerability Description
There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, there are no attack requirements, privileges, or user interaction required. Loss of availability is high; there is no impact on confidentiality or integrity.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Absolute | Secure Access | >= 9.0, <= 13.54 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-49080?
CVE-2025-49080 is a vulnerability with a CVSS score of 7.5 (HIGH). There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially craf...
How severe is CVE-2025-49080?
CVE-2025-49080 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-49080?
Check the references section above for vendor advisories and patch information. Affected products include: Absolute Secure Access.