This vulnerability involves a buffer overflow in the Secure Access client’s message parsing code before version 14.50. By sending a crafted packet from a malicious server, an attacker may overwrite a small memory region, which could lead to memory corruption or denial of service conditions. The CVSS 4.0 vector indicates network attack vector with high attack complexity and partial user interaction required, resulting in low overall severity.

Successful exploitation can cause memory corruption or denial of service on the client system running Secure Access prior to version 14.50. There is no indication of privilege escalation or data confidentiality impact. The low CVSS score reflects the limited scope and difficulty of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid connecting Secure Access clients to untrusted or potentially malicious servers to reduce risk.