OpenSSL BIO_new_NDEF Use-After-Free (CVE-2023-0215)

Summary

A use-after-free in the BIO chain can cause a denial of service.

Vulnerability ID	Vulnerability Overview
CVE-2023-0215	The BIO_new_NDEF function fails to properly manage memory on error paths, leaving a dangling pointer that triggers a crash when subsequently freed.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices