What’s Vulnerable › Vulnerabilities

CVE-2024-28957

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-15 · updated 2026-06-17
• Weakness: CWE-340

Description

Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.

Affected products

• DMG MORI Digital Co., LTD. and NEXT Co., Ltd. Cente IPv6: through 1.51
• DMG MORI Digital Co., LTD. and NEXT Co., Ltd. Cente IPv6 SNMPv2: through 2.30
• DMG MORI Digital Co., LTD. and NEXT Co., Ltd. Cente IPv6 SNMPv3: through 2.30
• Nxtech Cente Tcp/Ipv4: through 1.41
• Nxtech Cente Tcp/Ipv4 Snmpv2: through 2.30
• Nxtech Cente Tcp/Ipv4 Snmpv3: through 2.30

References

• https://jvn.jp/en/vu/JVNVU94016877/
• https://www.cente.jp/obstacle/4956/
• https://www.cente.jp/obstacle/4963/
• https://jvn.jp/en/vu/JVNVU94016877/
• https://www.cente.jp/obstacle/4956/
• https://www.cente.jp/obstacle/4963/

Get alerted when CVE-2024-28957 or the next vulnerability affects your stack