This vulnerability involves a memory management error in Absolute Security Secure Access servers before version 14.55. Exploitation requires an attacker to have intimate knowledge and total control over the tunnel protocol, enabling them to create a persistent denial-of-service condition on the server. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No vendor advisory or patch information is currently available.

Successful exploitation results in a persistent denial-of-service condition, impacting the availability of the Secure Access server. There is no indication of confidentiality or integrity impact. The attack requires low complexity but privileges at the level of limited user access and no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications for updates. Given the attack requires total control over the tunnel protocol, restricting access to the tunnel interface and limiting privileges may reduce exposure.