CVE-2022-43501
Critical
Description
KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones.
SeverityCritical
CVSS9.1
Exploit probability—
ProductElwsc Kasago
PublishedFeb 10, 2023
First seenFeb 10, 2023
Weakness typeCWE-330CWE-330
How to fix
Update
- elwsc kasago_ipv46.0.1.34 or later
- elwsc kasago_ipv4_light6.0.1.34 or later
- elwsc kasago_ipv6\/v4_dual6.0.1.34 or later
- elwsc kasago_mobile_ipv66.0.1.34 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| elwsc kasago_ipv4 | v < 6.0.1.34 | 6.0.1.34 |
| elwsc kasago_ipv4_light | v < 6.0.1.34 | 6.0.1.34 |
| elwsc kasago_ipv6\/v4_dual | v < 6.0.1.34 | 6.0.1.34 |
| elwsc kasago_mobile_ipv6 | v < 6.0.1.34 | 6.0.1.34 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.