OpenSSL CMS stack buffer overflow (CVE-2025-15467)

Vulnerability ID	Vulnerability Overview
CVE-2025-15467	When parsing CMS AuthEnvelopedData structures that use AEAD ciphers, the Initialization Vector (IV) is copied into a fixed-size stack buffer without proper length validation. An attacker can craft a malicious CMS message with an oversized IV to trigger an out-of-bounds write.

Affected Supported TeraStations

TS71210
Fixed in firmware version 2.06
 

Back to Security Notices

Date	Description
09/02/2026	Initial release

Back to Security Notices