CVE-2011-1323
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC...
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.
Exploit likelihood
What each source reports
NVD Score used
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.
- Record
CVE-2011-1323- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.
- Record
CVE-2011-1323- Updated
- 2026-11-02
EUVDEUVD-2011-1331 No score
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.
- Record
EUVD-2011-1331- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2rcj-9v96-9vwg No score
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC...
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.
- Record
GHSA-2rcj-9v96-9vwg- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- nec ip38x\/1000
- nec ip38x\/103
- nec ip38x\/105
- nec ip38x\/107e
- nec ip38x\/1100
- nec ip38x\/1200
- nec ip38x\/140
- nec ip38x\/1500
- nec ip38x\/200
- nec ip38x\/2000
- nec ip38x\/250i
- nec ip38x\/300
Show 40 moreShow less
- nec ip38x\/3000
- nec ip38x\/52
- nec ip38x\/55i
- nec ip38x\/57i
- nec ip38x\/58i
- nec ip38x\/sr100
- nec ip38x\/v700
- yamaha rt100i
- yamaha rt102i
- yamaha rt103i
- yamaha rt105e
- yamaha rt105i
- yamaha rt105p
- yamaha rt107e
- yamaha rt140e
- yamaha rt140f
- yamaha rt140i
- yamaha rt140p
- yamaha rt200i
- yamaha rt250i
- yamaha rt300i
- yamaha rt56v
- yamaha rt57i
- yamaha rt58i
- yamaha rt60w
- yamaha rt80i
- yamaha rta50i
- yamaha rta52i
- yamaha rta54i
- yamaha rta55i
- yamaha rtv700
- yamaha rtw65b
- yamaha rtw65i
- yamaha rtx1000
- yamaha rtx1100
- yamaha rtx1200
- yamaha rtx1500
- yamaha rtx2000
- yamaha rtx3000
- yamaha srt100
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1323 is a high vulnerability (CVSS 7.8) in Nec Ip38x\/1000, published May 9, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. No source names a fixed version.