IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2 contain an out‑of‑bounds write that can be triggered remotely, causing the gateway to crash and become unavailable. The flaw stems from improper bounds checking in the firmware, classified as CWE-787. The resulting denial of service can disrupt all services that rely on the gateway, potentially affecting multiple downstream systems.

Affected vendors include IBM; the product is DataPower Gateway. Affected release ranges are 10.5.0.0‑10.5.0.22, 10.6.0.0‑10.6.0.10, 10.6.1‑10.6.6, and 11.0.0.0‑11.0.0.2. Fixed releases begin at 10.5.0.23, 10.6.0.11, 10.6.1.1, 10.6.6.1, and 11.0.0.3 and later.

The CVSS score of 7.5 indicates a high severity, and the EPSS score is not available, so the likelihood of exploitation remains uncertain but non‑zero. The vulnerability is not listed in CISA’s KEV catalog. An attacker can exploit the flaw by sending crafted requests over the network to the gateway’s management or data ports; authentication is not required according to the description. When triggered, the gateway crashes and enters a restart loop, denying service to legitimate traffic. No public exploit is known, but the high impact and remote nature warrant immediate remediation.