A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 (Build versions prior to 3119.001).
The product dereferences a pointer that it expects to be valid but is NULL.
Link | Tags |
---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04 | third party advisory us government resource |