CVE-2025-59595CWE-20

CVE-2025-59595

High · published November 5, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

⚡ Just one crafty packet could send your server crashing down! 💥 This denial of service vulnerability in Secure Access, affecting versions before 14.12, is a sneaky way for attackers to disrupt your services. Think of it like a restaurant where an uninvited guest sends in a fake order that causes the entire kitchen to shut down — one bad packet could ruin the dinner rush for everyone inside! If exploited, this vulnerability could lead to your server becoming completely unresponsive, leaving your users in the dark and potentially costing you both trust and revenue. Picture your website going offline right when the traffic peaks—devastating, right?

Put simply

Think of it like a restaurant where an uninvited guest sends in a fake order that causes the entire kitchen to shut down — one bad packet could ruin the dinner rush for everyone inside! CVE-2025-59595 is a denial of service vulnerability that allows attackers to crash servers by sending specially crafted packets, particularly in non-default configurations. This means that certain settings may leave your server exposed to this sneaky attack.

What to do

If exploited, this vulnerability could lead to your server becoming completely unresponsive, leaving your users in the dark and potentially costing you both trust and revenue. Picture your website going offline right when the traffic peaks—devastating, right? To protect your systems, immediately upgrade to Secure Access version 14.12 or later. Additionally, review your server configurations to ensure they are not left in a vulnerable state. Regular audits can also help spot these kinds of issues before they become a problem. You've got this! With these steps, you’ll have your defenses up in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00374 · 30.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-11-05T04:15Z
Affected products (1)
ProductVersionsFixed in
absolute/secure_access< 14.1214.12
References (1)
EPSS history
Timeline
  • 04 NOV 22:46Z
    CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12
    cvelistv5