contiki-ng

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical27CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

contiki-ng records in CISA KEV

No contiki-ng vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contiki-ng 42 records HIGH Tinydtls 6 records MEDIUM Contiki-ng. 5 records LOW Contiki-ng Tinydtls 1 record MEDIUM

Records

42 records in Contiki-ng · all components

TI-2020-14885 CVE-2020-24336 · GHSA-37q6-vw96-q6q8

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5.

HIGH 76

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.59089 Published 2020-12-11 No fix listed CWE-120

TI-2020-16751 CVE-2020-27634 · GHSA-pw9j-jvfg-9ppw

In Contiki 4.5, TCP ISNs are improperly random.

MEDIUM 51

In Contiki 4.5, TCP ISNs are improperly random.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01716 Published 2023-10-10 No fix listed CWE-330

TI-2018-16029 CVE-2018-1000804 · GHSA-r7x6-mvwq-vr59

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query…

MEDIUM 51

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.063 Published 2018-10-08 No fix listed CWE-119

TI-2018-13749 CVE-2018-19417 · GHSA-cxvc-6cjq-88vx

An issue was discovered in the MQTT server in Contiki-NG before 4.2.

MEDIUM 51

An issue was discovered in the MQTT server in Contiki-NG before 4.2.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.05692 Published 2018-11-21 No fix listed CWE-119

TI-2023-14381 CVE-2023-30546

Contiki-NG has off-by-one error in Antelope DBMS

MEDIUM 50

Contiki-NG is an operating system for Internet of Things devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00638 Published 2023-04-26 No fix listed CWE-125

TI-2023-14839 CVE-2023-31129

Contiki-NG missing NULL pointer check in IPv6 neighbor discovery

MEDIUM 49

The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00644 Published 2023-05-08 No fix listed CWE-476

TI-2022-16354 CVE-2022-35927

Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG

MEDIUM 47

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0216 Published 2022-08-04 Fixed in 4.7 CWE-120

TI-2020-11746 CVE-2020-14935 · GHSA-cvph-4f6c-4mg7

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get…

MEDIUM 47

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02502 Published 2020-08-18 No fix listed CWE-787

TI-2023-16947 CVE-2023-34101

Contiki-NG vulnerable to out-of-bounds read when processing ICMP DAO input

MEDIUM 46

Contiki-NG is an operating system for internet of things devices.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00505 Published 2023-06-14 No fix listed CWE-125

TI-2019-06001 CVE-2019-8359 · GHSA-pcw5-87gf-vhfh

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0.

MEDIUM 46

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02174 Published 2020-04-23 No fix listed CWE-787

TI-2020-11747 CVE-2020-14936 · GHSA-jrf8-p6cc-fr4f

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.

MEDIUM 45

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01422 Published 2020-08-18 No fix listed CWE-787

TI-2020-11745 CVE-2020-14934 · GHSA-v2cg-frq6-hw49

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.

MEDIUM 45

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0154 Published 2020-08-18 No fix listed CWE-787

TI-2023-27822 CVE-2023-50927

Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00508 Published 2024-02-14 Fixed in 4.9 CWE-125

TI-2023-13462 CVE-2023-29001

Uncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00561 Published 2024-11-27 No fix listed CWE-674

TI-2023-12695 CVE-2023-28116

Buffer overflow in L2CAP due to misconfigured MTU

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00687 Published 2023-03-17 No fix listed CWE-120

TI-2021-04382 CVE-2021-21282

Buffer overflow in RPL source routing header processing

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for internet of things devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00993 Published 2021-06-18 Fixed in 4.5 CWE-120

TI-2021-04381 CVE-2021-21281

Buffer overflow due to unvalidated TCP data offset

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for internet of things devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00918 Published 2021-06-18 Fixed in 4.6 CWE-120

TI-2021-04380 CVE-2021-21280

Out-of-bounds write when processing 6LoWPAN extension headers

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for internet of things devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01064 Published 2021-06-18 Fixed in 4.6 CWE-787

TI-2024-27478 CVE-2024-41126

Out-of-bounds read when decoding SNMP messages in Contiki-NG

MEDIUM 43

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00294 Published 2024-11-27 No fix listed CWE-125

TI-2024-27477 CVE-2024-41125

Out-of-bounds read in SNMP when decoding a string in Contiki-NG

MEDIUM 43

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00294 Published 2024-11-27 No fix listed CWE-125

TI-2021-04508 CVE-2021-21410

Out-of-bounds read in the 6LoWPAN implementation

MEDIUM 42

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0123 Published 2021-06-18 No fix listed CWE-125

TI-2020-11748 CVE-2020-14937 · GHSA-vjv3-cq6j-9224

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through…

MEDIUM 42

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01478 Published 2020-08-18 No fix listed CWE-125

TI-2020-09772 CVE-2020-12141 · GHSA-jxvq-67hx-ghg3

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker…

MEDIUM 42

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via crafted SNMP packets to snmp_ber_decode_string_len_buffer in…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01566 Published 2021-10-19 No fix listed CWE-125

TI-2022-16477 CVE-2022-36054

Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG

MEDIUM 41

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0078 Published 2022-09-01 Fixed in 4.8 CWE-787

TI-2024-31548 CVE-2024-47181

Unaligned memory access in RPL option processing in Contiki-NG

MEDIUM 40

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2024-11-27 No fix listed CWE-704

Open these records in search →

Critical	27
High	25
Medium	5
Low	0
No CVSS	0