CVE-2025-23406

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-14 · updated 2026-06-17
Weakness: CWE-125

Description

Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to cause the affected product crashed.

Affected products

DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6: through Ver.1.60
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6 SNMPv2: through Ver.2.30
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente IPv6 SNMPv3: through Ver.2.30
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4: through Ver.1.51
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4 SNMPv2: through Ver.2.30
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. Cente TCP/IPv4 SNMPv3: through Ver.2.30

References

Get alerted when CVE-2025-23406 or the next vulnerability affects your stack