CyberRota
← Ana sayfaya dön

CVE-2026-7423

MEDIUM · CVSS 5.3 EPSS %0.02 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-04-29T19:16:26.617 · Çekilme zamanı: 2026-05-29T12:00:26.066061+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-7423
Severity
MEDIUM
CVSS
5.3
EPSS
%0.02

Orijinal NVD Açıklaması

Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing ping support is enabled, because header sizes are subtracted from a packet length field without validating the field is large enough, resulting in a heap out-of-bounds read of up to approximately 65KB. To mitigate this issue, users should upgrade to the fixed version when available.