Approved changes feed: RSS · Atom

cpe:2.3:a:weston-embedded:uc-tcp-ip:3.06.01:*:*:*:*:*:*:*

part: a version: 3.06.01 update: *

VendorWeston Embedded (bf71cffe-53a7-51f4-9bf7-1f3f223a2960)
ProductUc Tcp Ip (6b46aee4-3159-52fc-b0ac-9822c8cb4ebb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39541 vulnerable 2026-06-08 06:09:37.680255 Details available
MEDIUM (5.9)
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv6 ICMPv6 packet.
Published: 2024-02-20T14:45:03.331Z
Updated: 2025-11-04T18:16:35.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39540 vulnerable 2026-06-08 06:09:37.679618 Details available
MEDIUM (5.9)
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.
Published: 2024-02-20T14:45:03.230Z
Updated: 2025-11-04T18:16:34.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38562 vulnerable 2026-06-08 06:08:18.349393 Details available
HIGH (8.7)
A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
Published: 2024-02-20T14:45:02.733Z
Updated: 2025-11-04T18:15:51.871Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.