OpenSSL invalid cert policy DoS (CVE-2023-0465)

Summary

Processing flawed certificate policies leads to application crashes.

Vulnerability ID	Vulnerability Overview
CVE-2023-0465	A malformed certificate policy extension can trick OpenSSL into creating invalid internal data structures, resulting in a crash upon policy verification.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices