Unauthenticated Attacker Can Stop Device Operations with Specially Crafted Packet
CVE-2024-28894

Currently unrated

Key Information:

Vendor: Dmg Mori Digital Co., Ltd. And Next Co., Ltd.
Status: Cente Ipv6; Cente Ipv6 Snmpv2; Cente Ipv6 Snmpv3
Vendor: CVE Published:; 15 April 2024

🔔 Create Dmg Mori Digital Co., Ltd. And Next Co., Ltd. Vulnerability Alert

What is CVE-2024-28894?

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet.

Affected Version(s)

Cente IPv6 Ver.1.51 and earlier

Cente IPv6 SNMPv2 Ver.2.30 and earlier

Cente IPv6 SNMPv3 Ver.2.30 and earlier

References

https://www.cente.jp/obstacle/4960/

https://jvn.jp/en/vu/JVNVU94016877/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 15, 2024
Vulnerability Reserved
Mar 19, 2024

CVE-2024-28894 Data

JSON