Vulnerability record · CVE-2025-59668 · published 30 September 2025

CVE-2025-59668: NULL pointer dereference vulnerability

Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability. When processing a crafted certain UDP packet, the affected device may abnormally terminate.

8.7 CVSS 4.0 High EPSS 0.48% · top 61.3% CWE-476 · NULL pointer dereference Deferred

8.7CVSS 4.0 base score

0.48%EPSS exploitation probability, 30 days

NoNot in CISA KEV

0Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability. When processing a crafted certain UDP packet, the affected device may abnormally terminate.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

References

Link	Tags
https://jvn.jp/en/vu/JVNVU96989989/
https://www.nihonkohden.com/security.html
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-296-01
https://www.nihonkohden.com/security/main/01112/teaserItems3/0/linkList/0/link/NKcorporateResponse-CNS-6201_CentralMonit

Track CVE-2025-59668 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.2CVE-2026-21525Windows Remote Access Connection Manager null pointer dereference DoSWindows Remote Access Connection Manager contains a null pointer dereference (CWE-476) that lets an unauthorized attacker deny service locally. The f…KEVEPSS 4.8%analysed10 Feb 2026

Source: NIST National Vulnerability Database (record CVE-2025-59668), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.