This vulnerability involves an integer underflow in Absolute Security Secure Access servers before version 14.57. Exploitation requires an authenticated session and a non-default server configuration. Successful exploitation results in a persistent denial of service condition. The CVSS 4.0 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and high impact on availability.

An attacker with an authenticated session can cause a persistent denial of service on the affected Secure Access server, potentially disrupting service availability. There is no indication of confidentiality or integrity impact. The attack complexity is high and requires a non-default configuration, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should review server configurations and monitor for unusual traffic patterns from authenticated users. No vendor-provided mitigation or temporary fix is currently documented.