CVE-2025-23406
Medium
Description
Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to cause the affected product crashed.
SeverityMedium
CVSS5.3
Exploit probability—
ProductCente TCP/IPv4
PublishedFeb 14, 2025
First seenFeb 14, 2025
Weakness typeCWE-125Out-of-bounds read
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4 | Ver.1.51 and earlier | — |
| DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4 SNMPv2 | Ver.2.30 and earlier | — |
| DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4 SNMPv3 | Ver.2.30 and earlier | — |
| DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6 | Ver.1.60 and earlier | — |
| DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6 SNMPv2 | Ver.2.30 and earlier | — |
| DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6 SNMPv3 | Ver.2.30 and earlier | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.