CVE-2022-43501

CRITICAL 9.1CVE-2022-43501 · Published 10/02/2023 · updated 17/06/2026

In short

CVE-2022-43501 is a CRITICAL (CVSS 9.1) vulnerability affecting kasago ipv4 (elwsc), kasago ipv4 light (elwsc), kasago ipv6/v4 dual (elwsc).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 47.2% of all vulnerabilities.
Fix: update to 6.0.1.34 or later.

Package	Affected versions	Patched versions
kasago ipv4 elwsc	`< 6.0.1.34`	`6.0.1.34`
kasago ipv4 light elwsc	`< 6.0.1.34`	`6.0.1.34`
kasago ipv6/v4 dual elwsc	`< 6.0.1.34`	`6.0.1.34`
kasago mobile ipv6 elwsc	`< 6.0.1.34`	`6.0.1.34`

Description

KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones.

References

jvn.jp/en/vu/JVNVU99551468 · Third Party Advisory
elwsc.co.jp/news/6352 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free