CVE-2021-27565

概要

参考情報

• forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack · Mitigation
• hcc-embedded.com · Product
• hcc-embedded.com/about/about-interniche · Product
• kb.cert.org/vuls/id/608209 · Third Party Advisory

nichestack のその他の脆弱性

• CVE-2021-36762高 7.5An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't en…
• CVE-2021-31401高 7.5An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value …
• CVE-2020-35685緊急 9.1An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN f…
• CVE-2020-35684高 7.5An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extract…
• CVE-2020-35683高 7.5An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extrac…