CVE-2024-28957: medium-severity vulnerability in DMG MORI Digital Co., LTD. and NEXT Co., Ltd.
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.8%
Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
DMG MORI Digital Co., LTD. and NEXT Co., Ltd. · Cente IPv6DMG MORI Digital Co., LTD. and NEXT Co., Ltd. · Cente IPv6 SNMPv2DMG MORI Digital Co., LTD. and NEXT Co., Ltd. · Cente IPv6 SNMPv3DMG MORI Digital Co., LTD. and NEXT Co., Ltd. · Cente TCP/IPv4DMG MORI Digital Co., LTD. and NEXT Co., Ltd. · Cente TCP/IPv4 SNMPv2DMG MORI Digital Co., LTD. and NEXT Co., Ltd. · Cente TCP/IPv4 SNMPv3Related CVEs — DMG MORI Digital Co., LTD. and NEXT Co., Ltd.
In the same product, most dangerous first.