Vulnerabilities > CVE-2023-38562 - Unspecified vulnerability in Weston-Embedded Uc-Tcp-Ip 3.06.01

047910
CVSS 9.1 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
weston-embedded
critical

Summary

A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Weston-Embedded
1