OpenSSL X509 hash NULL dereference (CVE-2021-23841)

Summary

A NULL pointer dereference when parsing malicious certificates causes a crash.

Vulnerability ID	Vulnerability Overview
CVE-2021-23841	The X509_issuer_and_serial_hash function does not handle certificates lacking an issuer field correctly, resulting in a NULL pointer dereference and DoS.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices