{"id":"CVE-2025-23406","state":"PUBLISHED","title":"Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially cra","description":"Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to cause the affected product crashed.","publishedAt":"2025-02-14T04:24:05.055Z","updatedAt":"2025-02-14T15:46:20.615Z","severity":{"score":5.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"jpcert"},"assigner":"jpcert","products":["DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4","DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4 SNMPv2","DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4 SNMPv3","DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6","DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6 SNMPv2","DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6 SNMPv3"],"affected":[{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente TCP/IPv4","versions":[{"version":"Ver.1.51 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente TCP/IPv4 SNMPv2","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente TCP/IPv4 SNMPv3","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente IPv6","versions":[{"version":"Ver.1.60 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente IPv6 SNMPv2","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente IPv6 SNMPv3","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]}],"references":["https://www.cente.jp/obstacle/5451/","https://jvn.jp/en/vu/JVNVU92227620/"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/23xxx/CVE-2025-23406.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-23406","state":"PUBLISHED","datePublished":"2025-02-14T04:24:05.055Z","dateUpdated":"2025-02-14T15:46:20.615Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-02-04T00:50:41.527Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to cause the affected product crashed."}],"affected":[{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente TCP/IPv4","versions":[{"version":"Ver.1.51 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente TCP/IPv4 SNMPv2","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente TCP/IPv4 SNMPv3","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente IPv6","versions":[{"version":"Ver.1.60 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente IPv6 SNMPv2","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]},{"vendor":"DMG MORI Digital Co., LTD. and NXTech Co., Ltd.","product":"Cente IPv6 SNMPv3","versions":[{"version":"Ver.2.30 and earlier","status":"affected"}]}],"references":[{"url":"https://www.cente.jp/obstacle/5451/"},{"url":"https://jvn.jp/en/vu/JVNVU92227620/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"Out-of-bounds read","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-02-14T04:24:05.055Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-14T15:37:06.223307Z","id":"CVE-2025-23406","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-14T15:46:20.615Z"}}]}}}