CVE-2025-23406 — DMG MORI Digital Co., LTD. and NXTech Co., Ltd. / Cente TCP/IPv4

Description (CNA)

Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to cause the affected product crashed.

Affected (CNA)

Vendor / product	Versions
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. / Cente TCP/IPv4	affected Ver.1.51 and earlier
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. / Cente TCP/IPv4 SNMPv2	affected Ver.2.30 and earlier
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. / Cente TCP/IPv4 SNMPv3	affected Ver.2.30 and earlier
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. / Cente IPv6	affected Ver.1.60 and earlier
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. / Cente IPv6 SNMPv2	affected Ver.2.30 and earlier
DMG MORI Digital Co., LTD. and NXTech Co., Ltd. / Cente IPv6 SNMPv3	affected Ver.2.30 and earlier

CWE

CWE-125

References

https://www.cente.jp/obstacle/5451/
https://jvn.jp/en/vu/JVNVU92227620/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.