Suprema BioStar 2 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Suprema BioStar 2 (Server) versions 2.9.8, 2.9.10, and 2.9.11. The vulnerability allows an unauthenticated remote attacker to cause a service disruption by sending HTTP POST requests to the '/api/migration' endpoint. This action triggers an unhandled exception that halts critical processes, leaving the system offline until manually restarted. The disruption causes access control readers to fail and may impact third-party integrations.

Impact

Exploitation of this vulnerability leads to a significant denial-of-service condition, causing the system to go offline and disrupting access control functions and potentially third-party integrations.

Remediation

Users are advised to update to the latest available version of Suprema BioStar 2.