CVE-2025-59668
BaseFortify
Publication date: 2025-09-30
Last updated on: 2025-10-31
Assigner: JPCERT/CC
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nihon_kohden | cns-6201 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a NULL pointer dereference in multiple versions of the Central Monitor CNS-6201. When the device processes a specially crafted UDP packet, it may cause the device to abnormally terminate or crash. This issue affects unsupported versions 01-03, 01-04, 01-05, 01-06, 02-10, 02-11, and 02-40 of the CNS-6201. [1]
How can this vulnerability impact me? :
The vulnerability can cause the affected CNS-6201 device to unexpectedly terminate or crash, leading to a loss of availability. This means the device may stop functioning properly, potentially disrupting monitoring operations. However, it does not impact confidentiality or integrity of data. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for abnormal termination or crashes of the Central Monitor CNS-6201 device when it processes UDP packets. Since the vulnerability is triggered by specially crafted UDP packets, network traffic analysis focusing on unusual or malformed UDP packets directed at the CNS-6201 may help identify exploitation attempts. However, no specific detection commands or signatures are provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
The recommended immediate mitigation step is to discontinue use of the affected unsupported CNS-6201 product versions (01-03, 01-04, 01-05, 01-06, 02-10, 02-11, and 02-40). Consider replacing the device with supported alternatives. Additionally, implementing network-level protections such as filtering or blocking suspicious UDP traffic to the device may reduce risk. Nihon Kohden emphasizes a comprehensive, multi-layered security strategy involving customer participation for protection. [1, 2]