CVE-2024-28957

moderate-risk

Published 2024-04-15

Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.

Do I need to act?

0.41% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.3/10 Medium

NETWORK / LOW complexity

Affected Products (6)

Cente Ipv6

Cente Ipv6 Snmpv2

Cente Ipv6 Snmpv3

Cente Tcp\/Ipv4

Cente Tcp\/Ipv4 Snmpv2

Cente Tcp\/Ipv4 Snmpv3

Affected Vendors

Nxtech

References (6)

Third Party Advisory https://jvn.jp/en/vu/JVNVU94016877/

Vendor Advisory https://www.cente.jp/obstacle/4956/

Vendor Advisory https://www.cente.jp/obstacle/4963/

Third Party Advisory https://jvn.jp/en/vu/JVNVU94016877/

Vendor Advisory https://www.cente.jp/obstacle/4956/

Vendor Advisory https://www.cente.jp/obstacle/4963/

/ 100

moderate-risk

Severity 21/34 · High

Exploitability 2/34 · Minimal

Exposure 13/34 · Low