JVN#90872372 WebSAM DeploymentManager vulnerable to denial of service

WebSAM DeploymentManager is a product that manages the distribution of security patches. WebSAM DeploymentManager contains a denial of service (DoS) vulnerability.

Impact

On a server or workstation with “Client Service for DPM” installed, a remote attacker may shut down or restart the operating system.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Filter traffic using a firewall
Deny access to port 56010 for packets that do not have a source IP of the WebSAM DeploymentManager server.

For more information, refer to the developer’s website.

Products Affected

Servers or workstations that installed “Client Service for DPM” from the following products are vulnerable.

• WebSAM DeploymentManager Ver5.13 and earlier

The above mentioned WebSAM DeploymentManager is provided as part of the following products and are also affected by this vulnerability.

• SigmaSystemCenter 2.1 Update2 and earlier
• BladeSystemCenter all versions
• ExpressSystemCenter all versions
• VirtualPCCenter 2.2 and earlier