Loading vulnerability…
Uncontrolled Resource Consumption in Progress MOVEit Transfer AS2 Module
CVE-2025-10932 is an uncontrolled resource consumption vulnerability in the AS2 module of Progress MOVEit Transfer. According to the provided content, the issue affects MOVEit Transfer versions 2025.0.0 before 2025.0.3, 2024.1.0 before 2024.1.7, and 2023.1.0 before 2023.1.16. The available information indicates that processing of AS2-related input can cause excessive consumption of system resources, leading to a denial-of-service condition. No further technical detail about the specific vulnerable function or code path is provided in the supplied content.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can cause denial of service by exhausting or excessively consuming system resources in the MOVEit Transfer AS2 module. Based on the supplied content and the DDoS categorization, the likely operational impact is degradation or interruption of file transfer services handled by the affected MOVEit Transfer instance, potentially affecting availability for legitimate users and AS2 integrations.
If you can’t patch tonight, do this now.
If immediate patching is not possible, reduce exposure of the AS2 module where operationally feasible, restrict access to trusted AS2 partners and source IP ranges, and apply network- and application-layer rate limiting or traffic filtering to reduce the likelihood of resource-exhaustion attacks. Increased monitoring of AS2 service performance and resource utilization may help detect exploitation attempts. However, no vendor-specific workaround is provided in the supplied content.
Patch, then assume compromise.
Upgrade Progress MOVEit Transfer to a fixed version. The provided content indicates the issue is addressed in MOVEit Transfer 2025.0.3 and later, 2024.1.7 and later, and 2023.1.16 and later. Organizations should identify deployments using the AS2 module and apply the appropriate vendor patch level as soon as possible.
No public exploits tracked yet. Mallory keeps watching.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.