by Kastro
Paper/Archive/CVE-2022-43501

CVE-2022-43501

ZUKEN Elmic Kasago IPv6/v4 Dual — KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random sou…

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (NVD, ADP agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 47.0.470 × 209.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones.

Affected

ProductAffectedFixed inSource
Kasago IPv6/v4 Dualprior to Ver6.0.1.34–CNA
Kasago IPv4prior to Ver6.0.1.34–CNA
Kasago IPv4 Lightprior to Ver6.0.1.34–CNA
Kasago mobile IPv6prior to Ver6.0.1.34–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refelwsc.co.jp/news/6352writeupjvn.jp/en/vu/JVNVU99551468