Sales Chat - Click Here

OpenSSL EDIPartyName NULL dereference (CVE-2020-1971)

Sep 09, 2026

Summary

Parsing a malicious X.509 certificate causes a NULL pointer dereference and DoS.


Vulnerability ID Vulnerability Overview
CVE-2020-1971 When verifying a certificate containing an EDIPartyName subject alternative name, OpenSSL triggers a NULL pointer dereference, crashing the application.


Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date Description
09/09/2026 Initial release


Back to Security Notices

X