IISShield contains a flaw that may allow a remote attacker to bypass the default rules that prevent malicious attacks from reaching the IIS server. The flaw occurs when a specific byte check is sent to the server, IISShield recognizes it as a bad request but fails to drop the request.
Unknown or Incomplete
Upgrade to version 1.0.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.