CVE-2025-56234

{
  "id": "CVE-2025-56234",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-29T17:15:31.840",
  "lastModified": "2026-11-07T17:10:00.240",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "AT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability. For the processing of TCP RST packets, PLC AT_NA2000 has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence value, just to be within the current receive window, which violates RFC5961. This flaw allows attackers to send multiple random TCP RST packets to hit the acceptable range of sequence numbers, thereby interrupting normal connections and causing a denial-of-service attack."
    },
    {
      "lang": "es",
      "value": "AT_NA2000 del proveedor Nanda Automation Technology tiene una vulnerabilidad de denegación de servicio. Para el procesamiento de paquetes TCP RST, el PLC AT_NA2000 tiene un amplio rango aceptable de números de secuencia. No requiere que el número de secuencia coincida exactamente con el siguiente valor de secuencia esperado, solo que esté dentro de la ventana de recepción actual, lo que viola RFC5961. Esta falla permite a los atacantes enviar múltiples paquetes TCP RST aleatorios para alcanzar el rango aceptable de números de secuencia, interrumpiendo así las conexiones normales y causando un ataque de denegación de servicio."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-29T17:44:48.357366Z",
          "id": "CVE-2025-56234",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/zq-star/TCP-Vuln-Report/blob/master/PLC/AT-NA2000/tcp-rst/at-na2000-tcp-rst.md",
      "source": "[email protected]"
    }
  ]
}