CVE-2024-28957

Published Apr 15, 2024 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Nxtech
Nxtech cente Ipv6
Nxtech cente Ipv6 Snmpv2
Nxtech cente Ipv6 Snmpv3
Nxtech cente Tcp\/ipv4
Nxtech cente Tcp\/ipv4 Snmpv2
Nxtech cente Tcp\/ipv4 Snmpv3
CPEs cpe:2.3:a:nxtech:cente_ipv6:*:*:*:*:*:*:*:*
cpe:2.3:a:nxtech:cente_ipv6_snmpv2:*:*:*:*:*:*:*:*
cpe:2.3:a:nxtech:cente_ipv6_snmpv3:*:*:*:*:*:*:*:*
cpe:2.3:a:nxtech:cente_tcp\/ipv4:*:*:*:*:*:*:*:*
cpe:2.3:a:nxtech:cente_tcp\/ipv4_snmpv2:*:*:*:*:*:*:*:*
cpe:2.3:a:nxtech:cente_tcp\/ipv4_snmpv3:*:*:*:*:*:*:*:*
Vendors & Products Nxtech
Nxtech cente Ipv6
Nxtech cente Ipv6 Snmpv2
Nxtech cente Ipv6 Snmpv3
Nxtech cente Tcp\/ipv4
Nxtech cente Tcp\/ipv4 Snmpv2
Nxtech cente Tcp\/ipv4 Snmpv3
Type Values Removed Values Added
Weaknesses CWE-340
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
Aug 29, 2024, 8:06 PM
Reserved
Mar 19, 2024, 1:42 AM
Status
Analyzed
Published
Apr 15, 2024, 11:15 AM
Modified
Jun 17, 2026, 7:22 AM