Virtualsquare

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Virtualsquare records in CISA KEV

No Virtualsquare vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Picotcp · all components

TI-2023-17924 CVE-2023-35849 · GHSA-hjwh-ffhj-2hxf

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00638 Published 2023-06-19 No fix listed CWE-754

TI-2023-17923 CVE-2023-35848 · GHSA-wgr6-65qq-mvc3

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2023-06-19 No fix listed CWE-682

TI-2023-17922 CVE-2023-35847 · GHSA-rm6f-cq9j-f78m

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2023-06-19 No fix listed CWE-908

TI-2023-17921 CVE-2023-35846 · GHSA-46vq-gghc-mv9x

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2023-06-19 No fix listed