357 – Symmetric denial of service - FTP
Description
The server crash is generated with multiple requests with the functionality Configuration and Programming Reverse Homologation that takes time to process the information when making the request with the selected SFTP (SSH) protocol, causing a 504 error in the application.
Impact
Cause a denial of service.
Recommendation
Define a time-out when a query or a search is taking too long to process the information.
Threat
Authenticated attacker in the application.
Expected Remediation Time
Score 4.0
Default score using CVSS 4.0. It may change depending on the context of the src.
Base 4.0
- Attack vector: N
- Attack complexity: L
- Attack Requirements: N
- Privileges required: L
- User interaction: N
- Confidentiality (VC): N
- Integrity (VI): N
- Availability (VA): H
- Confidentiality (SC): N
- Integrity (SI): N
- Availability (SA): N
Threat 4.0
- Exploit maturity: X