What happened
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.
Affected versions
SIDOOR ATD430W: before * (custom); before V2.0.0 (custom); V5.1.1 through before * (custom); V4.2.0 through before * (custom); before V1.3 (custom); before V6.0.0 (custom); before V4.4.0 (custom); before V10.2 (custom); before V8.3 (custom) Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.