PT-2026-7964 · Unknown · Vnet/Ip Interface Package

Published 2025-03-15 · Updated 2026-03-02 · CVE-2025-1924

Positive Technologies · (AI Summary)

CVSS v3.1

8.2

High

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier

Description A flaw exists in the Vnet/IP Interface Package that could allow a denial-of-service (DoS) attack. Receiving maliciously crafted packets may cause Vnet/IP communication functions to stop or lead to arbitrary program execution.

Recommendations Update Vnet/IP Interface Package to a version later than R1.07.00.

Fix

DoS

Memory Corruption

Integer Underflow

Weakness Enumeration

CWE-787

CWE-191

Related Identifiers

BDU:2025-02823

CVE-2025-1924

Affected Products

Vnet/Ip Interface Package

References · 9

• https://web-material3.yokogawa.com/1/39281/files/YSAR-26-0002-E.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1924 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1924 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02823 · Security Note
• https://t.me/CVEtracker/44603 · Telegram Post
• https://twitter.com/CVEarity/status/2022264412787392828 · Twitter Post
• https://twitter.com/CVEnew/status/2022199476367011945 · Twitter Post
• https://t.me/cveNotify/153757 · Telegram Post
• https://t.me/cveNotify/151917 · Telegram Post