A vulnerability has been reported in 3Com IntelliJack Switch NJ220, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when NJ220 processes loopback packets with a length field of zero. This can be exploited to cause NJ220 to restart and stop sending event packets to the Central Configuration Manager utility via a specially crafted loopback packet.

The vulnerability is reported in versions prior to 2.0.23.

Solution
Update to version 2.0.23.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://support.3com.com/infodeli/tools/nj/nj220_02_00_23_readme.pdf

Deep Links
Links available to Secunia VIM customers