CVE-2024-5052

Resource consumption vulnerability in Cerberus FTP Enterprise

Description

Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, attempts to process a large number of incomplete HTTP requests.

Remediation

Solution:

  • This vulnerability has been resolved by Cerberus in version 12.11.6, released on 02/17/2023. To ensure the security and uninterrupted operation of the Cerberus FTP server, the manufacturer recommends the following mitigation measures: Update to the latest supported version: Customers are recommended to always update to the latest supported version of the Cerberus FTP server. This ensures access to the latest security enhancements and features, along with protection against known vulnerabilities. Secure access to SOAP port 10001: Customers can protect access to SOAP port 10001 using Cerberus configuration settings. It is recommended to configure access restrictions and authentication settings to limit access to authorized users. In addition, the use of external firewall rules to restrict access to SOAP port 10001 is advised. It is recommended that clients whitelist only trusted IPs with access to this port. Enable remote SOAP access if necessary: It is recommended that customers enable the "Allow Remote SOAP Access" feature only when necessary for legitimate SOAP clients. This practice minimizes the attack surface and reduces the risk of unauthorized access.

Category

7.5
CVSS
Severity: High
CVSS 3.1 •
EPSS 0.20%
Affected: Cerberus FTP Enterprise Cerberus FTP Enterprise
Published at:
Updated at:

References

Link Tags
https://www.incibe.es/en/incibe-cert/notices/aviso/resource-consumption-vulnerability-cerberus-ftp-enterprise

Frequently Asked Questions

What is the severity of CVE-2024-5052?
CVE-2024-5052 has been scored as a high severity vulnerability.
How to fix CVE-2024-5052?
To fix CVE-2024-5052: This vulnerability has been resolved by Cerberus in version 12.11.6, released on 02/17/2023. To ensure the security and uninterrupted operation of the Cerberus FTP server, the manufacturer recommends the following mitigation measures: Update to the latest supported version: Customers are recommended to always update to the latest supported version of the Cerberus FTP server. This ensures access to the latest security enhancements and features, along with protection against known vulnerabilities. Secure access to SOAP port 10001: Customers can protect access to SOAP port 10001 using Cerberus configuration settings. It is recommended to configure access restrictions and authentication settings to limit access to authorized users. In addition, the use of external firewall rules to restrict access to SOAP port 10001 is advised. It is recommended that clients whitelist only trusted IPs with access to this port. Enable remote SOAP access if necessary: It is recommended that customers enable the "Allow Remote SOAP Access" feature only when necessary for legitimate SOAP clients. This practice minimizes the attack surface and reduces the risk of unauthorized access.
Is CVE-2024-5052 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-5052 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-5052?
CVE-2024-5052 affects Cerberus FTP Enterprise Cerberus FTP Enterprise.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.