Sparx Pro Cloud Server Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Sparx Pro Cloud Server versions through 6.1. This issue arises from improper handling of syntactically invalid SQL queries, allowing an attacker to send a specially crafted query that causes the Pro Cloud Server service to terminate unexpectedly. While the vendor was notified of this vulnerability, they did not provide details on the vulnerable version range. Only Pro Cloud Server version 6.1 (build 167) and below were tested and confirmed as vulnerable; other versions may also be affected.

Impact

Exploitation of this vulnerability leads to an unexpected termination of the Pro Cloud Server service, causing a denial-of-service condition.