← Back

CVE-2022-43501

nvd nist
Published: Feb 10, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones.

Affected (4)

Elwsc
4 products
Kasago Ipv4
Kasago Ipv4 Light
Kasago Ipv6/v4 Dual
Kasago Mobile Ipv6
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Kasago Ipv4
Before 6.0.1.34
Kasago Ipv4 Light
Before 6.0.1.34
Kasago Ipv6/v4 Dual
Before 6.0.1.34
Kasago Mobile Ipv6
Before 6.0.1.34

Related CWEs

CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (4)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.