CVE-2020-9000

HIGH

iPortalis iCS 7.1.13.0 - Denial of Service via .NET Input Validation Error Log Flooding

Title source: llm
STIX 2.1

Description

An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources (triggering a denial of service condition).

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://websec.nl/blog/

Scores

CVSS v3 7.5
EPSS 0.0109
EPSS Percentile 61.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (1)
iportalis/iportalis_control_portal 7.1.13.0
Published Sep 01, 2021
Tracked Since Feb 18, 2026