OpenSSL X509 policy bypass (CVE-2023-0466)

Summary

A bypass vulnerability prevents specific certificate policy constraints from being applied.

Vulnerability ID	Vulnerability Overview
CVE-2023-0466	The X509_VERIFY_PARAM_add0_policy function does not correctly enforce policy extensions, potentially accepting certificates that should have been rejected.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices