A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Weston-embedded |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-43250 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 04 Nov 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Fri, 11 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Wed, 12 Feb 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Weston-embedded
Weston-embedded uc-tcp-ip |
|
| Weaknesses | CWE-125 | |
| CPEs | cpe:2.3:a:weston-embedded:uc-tcp-ip:3.06.01:*:*:*:*:*:*:* | |
| Vendors & Products |
Weston-embedded
Weston-embedded uc-tcp-ip |
MITRE
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2025-11-04T18:16:34.752Z
Reserved: 2023-08-03T20:35:34.512Z
Link: CVE-2023-39540
Vulnrichment
Updated: 2025-11-04T18:16:34.752Z
NVD
Status : Modified
Published: 2024-02-20T15:15:08.323
Modified: 2025-11-04T19:15:55.010
Link: CVE-2023-39540
Redhat
No data.
OpenCVE Enrichment
No data.