CVE-2025-59668

Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability. When processing a crafted certain UDP packet, the affected device may abnormally terminate.

Score

CVSS 4.0 8.7 High

Status

Deferred - vultures@jpcert.or.jp

Published

2025-09-30

Last modified

2025-10-31

Weaknesses

CWE-476

Affected products

• Central Monitor Cns-6201 (Nihon Kohden Corporation)

References

• https://jvn.jp/en/vu/JVNVU96989989/
• https://www.nihonkohden.com/security.html
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-296-01
• https://www.nihonkohden.com/security/main/01112/teaserItems3/0/linkList/0/link/NKcorporateResponse-CNS-6201_CentralMoni…