Mdk Middleware
Monthly
DHCPv6 option parsing in Arm Keil MDK-Middleware 8.0.0 through 8.3.0 can over-read memory and unintentionally retransmit data, allowing an attacker on the same link-local network segment to obtain limited information and disrupt availability when IPv6/DHCPv6 is enabled. No authentication or user interaction is required, but impact is limited to low confidentiality loss and low availability disruption, with no integrity impact or code-execution claim in the available sources. No public exploit was identified at time of analysis, and this is a moderate-priority issue rather than an emergency.
Out-of-bounds reads and writes in the FTP Server RX buffer of Arm Keil MDK-Middleware 8.3.0 let network-reachable input drive memory accesses beyond the intended receive buffer, with the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, 6.5) indicating low complexity, no user interaction, no confidentiality loss and only partial integrity and availability impact. Only firmware and devices that actually build in and expose the optional MDK-Middleware FTP Server component are exposed, and the sources do not state whether the out-of-bounds condition is reached before or after FTP authentication, so an FTP login may still be a limiting prerequisite. No public exploit code has been identified at time of analysis, there is no CISA KEV entry, and SSVC records exploitation as none with partial technical impact while marking the flaw automatable.
A pre-authentication out-of-bounds read in the SNMP component of Arm Keil MDK-Middleware 8.0.0 through 8.3.0 lets a remote, unauthenticated attacker reach SNMP parsing code before any credential check and read past the bounds of an internal buffer, with the assessed impact limited to availability (CVSS 5.3, AV:N/AC:L/PR:N/UI:N/C:N/I:N/A:L). Only devices whose firmware is built on the affected middleware with the SNMP component compiled in, enabled and network-reachable (typically SNMP on UDP 161) are exposed; devices that do not ship or expose this stack are not exploitable. Exploitation has not been observed (CISA SSVC Exploitation: none) and no public exploit was identified at time of analysis, so this is a medium-severity denial-of-service-class issue rather than an emergency, though the automatable nature of the flaw warrants patching within the vendor's normal cycle.
DHCPv6 option parsing in Arm Keil MDK-Middleware 8.0.0 through 8.3.0 can over-read memory and unintentionally retransmit data, allowing an attacker on the same link-local network segment to obtain limited information and disrupt availability when IPv6/DHCPv6 is enabled. No authentication or user interaction is required, but impact is limited to low confidentiality loss and low availability disruption, with no integrity impact or code-execution claim in the available sources. No public exploit was identified at time of analysis, and this is a moderate-priority issue rather than an emergency.
Out-of-bounds reads and writes in the FTP Server RX buffer of Arm Keil MDK-Middleware 8.3.0 let network-reachable input drive memory accesses beyond the intended receive buffer, with the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, 6.5) indicating low complexity, no user interaction, no confidentiality loss and only partial integrity and availability impact. Only firmware and devices that actually build in and expose the optional MDK-Middleware FTP Server component are exposed, and the sources do not state whether the out-of-bounds condition is reached before or after FTP authentication, so an FTP login may still be a limiting prerequisite. No public exploit code has been identified at time of analysis, there is no CISA KEV entry, and SSVC records exploitation as none with partial technical impact while marking the flaw automatable.
A pre-authentication out-of-bounds read in the SNMP component of Arm Keil MDK-Middleware 8.0.0 through 8.3.0 lets a remote, unauthenticated attacker reach SNMP parsing code before any credential check and read past the bounds of an internal buffer, with the assessed impact limited to availability (CVSS 5.3, AV:N/AC:L/PR:N/UI:N/C:N/I:N/A:L). Only devices whose firmware is built on the affected middleware with the SNMP component compiled in, enabled and network-reachable (typically SNMP on UDP 161) are exposed; devices that do not ship or expose this stack are not exploitable. Exploitation has not been observed (CISA SSVC Exploitation: none) and no public exploit was identified at time of analysis, so this is a medium-severity denial-of-service-class issue rather than an emergency, though the automatable nature of the flaw warrants patching within the vendor's normal cycle.