ISPsystem, a subsidiary of Astra Group, has confirmed a security vulnerability affecting a specific build of its VMmanager 6 server virtualization platform. The company states that the situation is currently under control and that development teams are working to address the flaw and mitigate potential risks to client infrastructure.
The vendor has launched an internal investigation into the incident. To support its customers, the company has transitioned its technical support team to an enhanced operational mode, providing direct assistance to affected users. ISPsystem has declined to disclose the number of impacted operators or specific technical details, citing standard industry security practices.
ISPsystem has issued mandatory security recommendations for all platform users. Administrators are advised to restrict incoming and outgoing connections to the platform and virtualization nodes via firewalls, limiting access strictly to trusted personnel. Additionally, the company mandates limiting SSH access to trusted IP addresses and performing a comprehensive password reset across all installations.
