CVE-2025-9998CWE-754
Improper validation of packets sequencing
Medium · published September 5, 2025
What it is
The sequence of packets received by a Networking server are not correctly checked.
An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop.
The record
Technical detail
- CVSS v4.0
- 6.0 · MEDIUM
- Vector
- CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:U/RE:M/U:Green
- EPSS
- 0.00265 · 17.4th percentile
- Weakness
- CWE-754 · Improper Check for Unusual or Exceptional Conditions
- Published
- 2025-09-05T16:40Z
EPSS history
Timeline