OpenSSL OCB information disclosure flaw (CVE-2025-69418)

Vulnerability ID	Vulnerability Overview
CVE-2025-69418	When applications directly use the low-level CRYPTO_ocb128_encrypt or decrypt functions with input lengths that are not multiples of 16 bytes, the trailing bytes may be left unencrypted and unauthenticated, exposing sensitive data in cleartext.

Affected Supported TeraStations

TS71210
Fixed in firmware version 2.06
 

Back to Security Notices

Date	Description
09/02/2026	Initial release

Back to Security Notices