Lucene search
HistoryJun 19, 2023 - 3:15 a.m.
CVE-2023-35846
virtualsquare
picotcp-ng
transport layer
length
port filtering
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.4%
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.
Affected configurations
Node
virtualsquarepicotcpRange≤2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| virtualsquare | picotcp | * | cpe:2.3:a:virtualsquare:picotcp:*:*:*:*:*:*:*:* |
Related
osv
osv
CVE-2023-35846
2023-06-19 03:15:09
prion
prion
Code injection
2023-06-19 03:15:00
cve
cve
CVE-2023-35846
2023-06-19 03:15:09
cvelist
cvelist
CVE-2023-35846
2023-06-19 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.4%
Related for NVD:CVE-2023-35846