SoftCOM iKSORIS Internet Starter Module Client-Side Denial-of-Service Vulnerability

A client-side denial-of-service vulnerability has been identified in the Internet Starter module of SoftCOM iKSORIS software, affecting all versions prior to 79.0. The issue arises when an attacker tricks a user into visiting a URL with a 'd' parameter set to an unhandled value. This manipulation causes the server to return an error message, blocking subsequent requests. The problem persists until the user's session expires or cookies are manually deleted. A similar denial-of-service effect can occur if a user selects an unimplemented language option on the platform.

Impact

Exploitation of this vulnerability leads to a client-side denial-of-service condition, where the user's requests are blocked by the server, causing disruption in normal user activity.

Remediation

Users can update to version 79.0 or later to address this vulnerability.