Skip to content
OpenAdvisories
High · 7.5 CVE-2024-23911 EUVD-2024-21341GHSA-p2cr-5w6f-32jg

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in Cente middleware TCP…

Published Apr 15, 2024 · Updated Aug 1, 2024 · Assigned by jpcert

Description

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet.

Affected products

VendorProductAffectedFixed
DMG MORI Digital Co., LTD. and NEXT Cente IPv6 Ver.1.51 and earlier —
DMG MORI Digital Co., LTD. and NEXT Cente IPv6 SNMPv2 Ver.2.30 and earlier —
DMG MORI Digital Co., LTD. and NEXT Cente IPv6 SNMPv3 Ver.2.30 and earlier —

References