Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-28894 EUVD-2024-25960GHSA-mfjw-xrhr-9p46

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP …

Published Apr 15, 2024 · Updated Aug 2, 2024 · Assigned by jpcert

Description

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet.

Affected products

VendorProductAffectedFixed
DMG MORI Digital Co., LTD. and NEXT Cente IPv6 Ver.1.51 and earlier —
DMG MORI Digital Co., LTD. and NEXT Cente IPv6 SNMPv2 Ver.2.30 and earlier —
DMG MORI Digital Co., LTD. and NEXT Cente IPv6 SNMPv3 Ver.2.30 and earlier —

References