Definition

An attacker may be able to execute a Denial of Service (DoS) attack against the system. DoS conditions may come about due to vulnerabilities within the application, unstable hardware, or insufficient disk space. This may allow an attacker to cause the system to stop responding to requests for production services.

Impact Description

An attacker can leverage this vulnerability to deny access to business-critical functions of the application. As such, this vulnerability may have a significantly negative impact on the availability of the application.

Risk Mitigation

Options to protect against this include:

• Turn on a setting in IIS: Dynamic IP Restrictions Extension for IIS
  • https://www.iis.net/downloads/microsoft/dynamic-ip-restrictions
• Activate a quality Firewall that can handle and block multiple requests from same IP address/session