Security Bulletin: TS4500 is affected by CVE-2021-25217

Summary

TS4500 is affected by CVE-2021-25217 if the product is configured for DHCP.

Vulnerability Details

CVEID:CVE-2021-25217
**DESCRIPTION:**ISC DHCP is vulnerable to a denial of service, caused by a buffer overrun in program code used to read and parse stored leases. A remote attacker from within the local network could exploit this vulnerability to cause a crash in the DHCP server or DHCP client.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/202604 for the current score.
CVSS Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

At the time of this security bulletin, there are only two supported releases.

For the 1.7 release, upgrade to version 1.7.0.5 or later.

For the 1.8 release, upgrade to version 1.8.0.1 or later.

All future releases will include the fix for this vulnerability.

Workarounds and Mitigations

Manually configure an IP address instead of enabling DHCP.