PT-2023-25340 · Virtualsquare · Virtualsquare Picotcp
CVE-2023-35847
·
Publicado
2023-06-19
·
Atualizado
2023-06-26
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
VirtualSquare picoTCP (aka PicoTCP-NG) versions through 2.1
Description
The issue is related to the lack of a Maximum Segment Size (MSS) lower bound, which could potentially be set to zero. This affects the VirtualSquare picoTCP (aka PicoTCP-NG) software.
Recommendations
For VirtualSquare picoTCP (aka PicoTCP-NG) versions through 2.1, consider implementing a manual MSS lower bound to prevent potential issues until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Virtualsquare Picotcp