Product:
OpenThread
Summary
Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread allows an attacker on the adjacent IPv4 network to inject corrupted IPv6 packets into the Thread mesh or bypass security checks via crafted IPv4 packets with options. This vulnerability affects all platforms prior to commit 26a882d.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6 | CVE-2026-8369 |
Exploitation
An attacker can exploit this vulnerability by being on the adjacent IPv4 network and sending specially crafted IPv4 packets that contain options designed to manipulate the NAT64 translator. This can lead to the injection of corrupted IPv6 packets into the Thread mesh, potentially compromising the integrity of the network.
Affected Products
- OpenThread: Affected on all platforms before commit 26a882d due to improper input validation in the NAT64 translator.
Mitigation
To mitigate this vulnerability, users should update to the latest version of OpenThread that includes the fix for the improper input validation issue. Regularly monitoring for updates and applying security patches is essential to protect against such vulnerabilities.