Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.
Weakness
The product uses a scheme that generates numbers or identifiers that are more predictable than required.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cente_ipv6 | Nxtech | * | 1.51 (including) |
| Cente_ipv6_snmpv2 | Nxtech | * | 2.30 (including) |
| Cente_ipv6_snmpv3 | Nxtech | * | 2.30 (including) |
| Cente_tcp/ipv4 | Nxtech | * | 1.41 (including) |
| Cente_tcp/ipv4_snmpv2 | Nxtech | * | 2.30 (including) |
| Cente_tcp/ipv4_snmpv3 | Nxtech | * | 2.30 (including) |