CVE-2024-28894: Nxtech Cente IPv6

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet.

Affected products

• Nxtech Cente IPv6: up to and including 1.51
• Nxtech Cente IPv6 SNMPV2: up to and including 2.30
• Nxtech Cente IPv6 SNMPV3: up to and including 2.30

Published 2024-04-15. Last modified 2026-06-17.