CVE-2024-28957

2024-04-1510:48:59

jpcert

github.com

cve-2024-28957

cente middleware

tcp/ip network series

predictable identifiers

vulnerability

remote attacker

unauthenticated

communications interference

AI Score

7.1

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:cente:ipv6:*:*:*:*:*:*:*:*"
    ],
    "vendor": "cente",
    "product": "ipv6",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.51"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:cente:ipv6_snmpv2:*:*:*:*:*:*:*:*"
    ],
    "vendor": "cente",
    "product": "ipv6_snmpv2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.30"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:cente:ipv6_snmpv3:*:*:*:*:*:*:*:*"
    ],
    "vendor": "cente",
    "product": "ipv6_snmpv3",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.30"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:cente:ipv4snmpv2:*:*:*:*:*:*:*:*"
    ],
    "vendor": "cente",
    "product": "ipv4snmpv2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.30"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:cente:ipv4snmpv3:*:*:*:*:*:*:*:*"
    ],
    "vendor": "cente",
    "product": "ipv4snmpv3",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.30"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:cente:ipv4:*:*:*:*:*:*:*:*"
    ],
    "vendor": "cente",
    "product": "ipv4",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.41"
      }
    ],
    "defaultStatus": "unknown"
  }
]