Vulnerability index

Browse CVEs

54 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Contiki Ng CRITICAL 9.6
CVE-2024-41126

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet…

Fix: after 4.9
Fix from $2,300 2024-11-27
Contiki Ng HIGH 7.5
CVE-2024-47181

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementat…

Fix: after 4.9
Fix from $1,950 2024-11-27
Contiki Ng CRITICAL 9.6
CVE-2024-41125

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet…

Fix: after 4.9
Fix from $2,300 2024-11-27
Contiki Ng HIGH 7.5
CVE-2023-29001

Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers (SRH)…

Fix: after 4.9
Fix from $1,950 2024-11-27
Contiki Ng HIGH 7.5
CVE-2023-50926

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO…

Fix: after 4.9
Fix from $1,950 2024-02-14
Contiki Ng HIGH 7.5
CVE-2023-50927

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL…

Fix: 4.9+
Fix from $1,950 2024-02-14
Contiki Ng HIGH 7.6
CVE-2023-48229

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 8…

Fix: after 4.9
Fix from $1,950 2024-02-14
Tinydtls CRITICAL 9.1
CVE-2021-42147

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cau…

Mitigation only
Fix from $2,300 2024-01-24
Tinydtls HIGH 7.5
CVE-2021-42145

An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a de…

Fix: after 2018-08-30
Fix from $1,950 2024-01-24
Tinydtls HIGH 7.5
CVE-2021-42146

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number with…

Mitigation only
Fix from $1,950 2024-01-24
Contiki Ng Tinydtls CRITICAL 9.8
CVE-2021-42144

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input t…

Fix: after 2018-08-30
Fix from $2,300 2024-01-24
Tinydtls CRITICAL 9.1
CVE-2021-42143

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handsh…

Fix: after 2018-08-30
Fix from $2,300 2024-01-24
Tinydtls CRITICAL 9.8
CVE-2021-42142

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vuln…

Fix: after 2018-08-30
Fix from $2,300 2024-01-23
Tinydtls CRITICAL 9.8
CVE-2021-42141

An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets…

Fix: after 2018-08-30
Fix from $2,300 2024-01-22
Contiki Ng CRITICAL 9.1
CVE-2020-27634

In Contiki 4.5, TCP ISNs are improperly random.

Mitigation only
Fix from $2,300 2023-10-10
Contiki Ng MEDIUM 5.3
CVE-2023-37281

Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IP…

Fix: after 4.9
Fix from $1,600 2023-09-15
Contiki Ng MEDIUM 5.3
CVE-2023-37459

Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when a packet is received, the Contiki-NG network stack …

Fix: after 4.9
Fix from $1,600 2023-09-15
Contiki Ng CRITICAL 9.1
CVE-2023-34101

Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO packets in the `dao_input_storin…

Fix: after 4.8
Fix from $2,300 2023-06-14
Contiki Ng MEDIUM 6.5
CVE-2023-34100

Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value from an incoming packet, the Con…

Fix: after 4.8
Fix from $1,600 2023-06-09
Contiki Ng CRITICAL 9.8
CVE-2023-31129

The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router so…

Fix: after 4.8
Fix from $2,300 2023-05-08
Contiki Ng HIGH 7.5
CVE-2023-30546

Contiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in …

Fix: after 4.8
Fix from $1,950 2023-04-26
Contiki Ng CRITICAL 9.8
CVE-2023-28116

Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write…

Fix: after 4.8
Fix from $2,300 2023-03-17
Contiki Ng HIGH 7.4
CVE-2023-23609

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to …

Fix: after 4.8
Fix from $1,950 2023-01-26
Contiki Ng MEDIUM 6.5
CVE-2022-41972

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 contain a NULL Pointer Dereferen…

Fix: after 4.8
Fix from $1,600 2022-12-16
Contiki Ng MEDIUM 5.4
CVE-2022-41873

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Out-of-boun…

Fix: 4.9+
Fix from $1,600 2022-11-11
Contiki Ng HIGH 8.8
CVE-2022-36052

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UD…

Fix: 4.8+
Fix from $1,950 2022-09-01
Contiki Ng HIGH 8.8
CVE-2022-36053

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a b…

Fix: 4.8+
Fix from $1,950 2022-09-01
Contiki Ng HIGH 8.8
CVE-2022-36054

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating…

Fix: 4.8+
Fix from $1,950 2022-09-01
Contiki Ng CRITICAL 9.8
CVE-2022-35927

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In the RPL-Classic routing protocol implementation in the Contiki-NG o…

Fix: 4.7+
Fix from $2,300 2022-08-04
Contiki Ng HIGH 7.5
CVE-2022-35926

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv6 neighbor discovery options …

Fix: 4.8+
Fix from $1,950 2022-08-04