CVE-2025-59668: Multiple versions of Central Monitor CNS-6201 contain a NULL pointer derefe

Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability. When processing a crafted certain UDP packet, the affected device may abnormally ter

Status

Published

2025-09-30

Updated

2025-10-31

Assigning organization

jpcert

Description

Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability. When processing a crafted certain UDP packet, the affected device may abnormally terminate.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NIHON KOHDEN CORPORATION Central Monitor CNS-6201

01-03affected
01-04affected
01-05affected
01-06affected
02-10affected
02-11affected
and 02-40affected

References

https://www.nihonkohden.com/security.html ↗
https://jvn.jp/en/vu/JVNVU96989989/ ↗
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-296-01 ↗
https://www.nihonkohden.com/security/main/01112/teaserItems3/0/linkList/0/link/NKcorporateResponse-CNS-6201_CentralMonitor_Vulnerability(CVE-2025-59668)_en_Rev2.pdf ↗