CVE-2025-23406

Summary

CVE-2025-23406 is a newly disclosed vulnerability affecting Cente middleware TCP/IP Network Series. This issue involves an out-of-bounds read vulnerability, which is caused by insufficient validation of TCP Maximum Segment Size (MSS) option values. A maliciously crafted TCP packet can exploit this weakness, leading to unintended processing and potential crashes. Successful exploitation may allow attackers to execute arbitrary code or cause denial-of-service conditions. It is crucial to update affected systems as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.