CVE-2024-28957

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-340

Affected software

VendorProductVersions
DMG MORI Digital Co., LTD. and NEXT Co., Ltd.Cente TCP/IPv4Ver.1.41 and earlier
DMG MORI Digital Co., LTD. and NEXT Co., Ltd.Cente TCP/IPv4 SNMPv2Ver.2.30 and earlier
DMG MORI Digital Co., LTD. and NEXT Co., Ltd.Cente TCP/IPv4 SNMPv3Ver.2.30 and earlier
DMG MORI Digital Co., LTD. and NEXT Co., Ltd.Cente IPv6Ver.1.51 and earlier
DMG MORI Digital Co., LTD. and NEXT Co., Ltd.Cente IPv6 SNMPv2Ver.2.30 and earlier
DMG MORI Digital Co., LTD. and NEXT Co., Ltd.Cente IPv6 SNMPv3Ver.2.30 and earlier
centeipv6<= 1.51
centeipv6_snmpv2<= 2.30
centeipv6_snmpv3<= 2.30
centeipv4snmpv2<= 2.30
centeipv4snmpv3<= 2.30
centeipv4<= 1.41

References

Timeline

Published
Apr 15, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-28968.8A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. This issue affects the function formWifiWpsStart of the fCVE-2024-289608.2An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandlesCVE-2024-289617.8Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged maliCVE-2024-289627.5Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulneraCVE-2024-289635.5Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with loCVE-2024-289647.8Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticatCVE-2024-289655.4Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API CVE-2024-289665.4Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API CVE-2024-289675.4Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance RESTCVE-2024-289685.4Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collectioCVE-2024-289694.3Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API CVE-2024-28978.8A vulnerability classified as critical has been found in Tenda AC7 15.03.06.44. Affected is the function formWriteFacMac of the file /goform
CVE-2024-28957: Medium severity, CVSS 5.3 | Vulnix