SB2025040353 - Multiple vulnerabilities in Kaspersky IoT Secure Gateway Network Protector

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2025040353

SB2025040353 - Multiple vulnerabilities in Kaspersky IoT Secure Gateway Network Protector

Published: April 3, 2025

Security Bulletin ID SB2025040353
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Asymmetric Resource Consumption (Amplification) (CVE-ID: CVE-2024-55628)

CWE-ID: CWE-405 - Asymmetric Resource Consumption (Amplification)

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allow a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect handling of DNS resource name compression. A remote attacker can send small DNS messages containing very large hostnames and force the software to render very large DNS log records, leading to denial of service conditions.


2) Input validation error (CVE-ID: CVE-2024-55629)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect handling of TCP streams with TCP urgent data (out of band data), which can lead to Suricata analyzing data differently than the applications at the TCP endpoints. A remote attacker can bypass generic detection when using TCP urgent support.


Remediation

Install update from vendor's website.

References