Lucene search

Japan Vulnerability NotesJVN:25594256

HistoryJun 12, 2024 - 12:00 a.m.

JVN#25594256: Denial-of-service (DoS) vulnerability in IPCOM WAF function

2024-06-1200:00:00

Japan Vulnerability Notes

jvn.jp

ipcom

waf

vulnerability

dos

fsas technologies inc.

cwe-908

firmware

update

ipcom ex2 series

ipcom ve2 series

affected products

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

WAF function of IPCOM provided by Fsas Technologies Inc. contains a denial-of-service (DoS) vulnerability (CWE-908).

Impact

If the product receives a specially crafted packet by an attacker, the system may be rebooted or suspended.

Solution

Update the firmware
Update the firmware to the latest version according to the information provided by the developer.
The developer addressed the vulnerability in the following versions:

IPCOM EX2 Series (V01L0x Series) V01L07NF0301
IPCOM VE2 Series V01L07NF0301

Products Affected

IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier
IPCOM VE2 Series V01L07NF0201 and earlier