OpenThread NAT64 Translator Improper Input Validation Vulnerability Allowing IPv4 Packet Injection

A vulnerability exists in the NAT64 translator of OpenThread, prior to commit 26a882d, across all platforms. This issue stems from improper input validation, which allows an attacker on the adjacent IPv4 network to inject corrupted IPv6 packets into the Thread mesh. Additionally, crafted IPv4 packets with specific options can be used to bypass security checks.

Impact

Exploitation of this vulnerability could lead to the injection of malicious IPv6 packets into the Thread mesh network, potentially disrupting network operations or compromising security. Furthermore, the ability to craft IPv4 packets that bypass security checks could be exploited to manipulate network behavior or access restricted resources.

Remediation

Users can update to the latest version of OpenThread to address this vulnerability.