CVE-2023-39541

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-39541
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv6 ICMPv6 packet.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828 Exploit Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:weston-embedded:uc-tcp-ip:3.06.01:*:*:*:*:*:*:*
History

12 Feb 2025, 18:50

Type Values Removed Values Added
References () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828 - () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828 - Exploit, Third Party Advisory
CPE cpe:2.3:a:weston-embedded:uc-tcp-ip:3.06.01:*:*:*:*:*:*:*
First Time Weston-embedded uc-tcp-ip
Weston-embedded
CWE CWE-125

21 Nov 2024, 08:15

Type Values Removed Values Added
References () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828 - () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828 -
Summary
  • (es) Existe una vulnerabilidad de denegación de servicio en la funcionalidad de análisis ICMP e ICMPv6 de Weston Embedded uC-TCP-IP v3.06.01. Un paquete de red especialmente manipulado puede provocar una lectura fuera de los límites. Un atacante puede enviar un paquete malicioso para desencadenar esta vulnerabilidad. Esta vulnerabilidad se refiere a una denegación de servicio durante el análisis de un paquete IPv6 ICMPv6.

20 Feb 2024, 18:15

Type Values Removed Values Added
References
  • {'url': 'https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1828', 'source': 'talos-cna@cisco.com'}

20 Feb 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-20 15:15

Updated : 2025-02-12 18:50

NVD link : CVE-2023-39541

Mitre link : CVE-2023-39541

CVE.ORG link : CVE-2023-39541

JSON object : View

Products Affected

weston-embedded

  • uc-tcp-ip
CWE
CWE-126

Buffer Over-read

CWE-125

Out-of-bounds Read