This vulnerability involves an out of bounds read in Secure Access servers before version 14.57. Exploitation requires an attacker to be in a man-in-the-middle position to send maliciously crafted data packets to the server, resulting in a persistent denial of service. The CVSS 4.0 base score is 8.7, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No known exploits are reported in the wild, and no official remediation or patch information is currently available.

Successful exploitation leads to a persistent denial of service on the Secure Access server, disrupting availability. There is no indication of confidentiality or integrity impact. The attack requires network access with a man-in-the-middle position but no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for suspicious network activity consistent with man-in-the-middle attacks and consider network-level protections to limit exposure.