OpenSSL PKCS12 NULL dereference (CVE-2024-0727)

Summary

Processing a malformed PKCS12 file causes a crash due to a NULL dereference.

Vulnerability ID	Vulnerability Overview
CVE-2024-0727	OpenSSL crashes when unpacking a PKCS12 file missing the ContentInfo MAC data, leading to a denial of service for applications processing untrusted files.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices