VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Feb 20, 2024· Updated Jun 17, 2026

CVE-2023-39540

CVE-2023-39540

Description

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Weston Embedded/uC-TCP-IP3 versions
    cpe:2.3:a:weston-embedded:uc-tcp-ip:3.06.01:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:weston-embedded:uc-tcp-ip:3.06.01:*:*:*:*:*:*:*
    • (no CPE)range: = 3.06.01
    • (no CPE)range: v3.06.01
  • Silabs.com/Gecko Platformv5
    Range: 4.3.1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.