Critical .NET Deserialization Vulnerability in ibaPDA and ibaDatCoordinator

A vulnerability has been discovered in ibaPDA and ibaDatCoordinator that allows unauthenticated remote attackers to execute arbitrary code via .NET deserialization. This flaw affects the applications due to improper restrictions on the .NET BinaryFormatter during client-server communication. The vulnerability enables privilege escalation under the service user account, potentially granting full system access. The affected applications are ibaPDA and ibaDatCoordinator, which utilize TCP port 9170 for server communication. Users are advised to upgrade to ibaPDA version 8.14.0 and ibaDatCoordinator version 4.0.7 to mitigate the risk. The vulnerability is similar to previously documented issues with .NET BinaryFormatter. Security experts recommend restricting connections to localhost and adjusting firewall settings to enhance security. Immediate action is necessary to prevent exploitation.

Key Points: • Unauthenticated remote code execution vulnerability in ibaPDA and ibaDatCoordinator. • Affected applications can be exploited via .NET deserialization flaws. • Users must upgrade to specified versions to mitigate the risk.