DeutschShown in its original language — a full translation is planned for a future version.
TCP/IP Stack: Mehrere Schwachstellen
view advisory published 2021-02-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TCP/IP Stack ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand herbeiführen oder Sicherheitsvorkehrungen umgehen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-27636US | critical9.1OT elevated | — | ||
In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random. | ||||
| CVE-2020-27635US | critical9.1OT elevated | — | ||
In PicoTCP 1.7.0, TCP ISNs are improperly random. | ||||
| CVE-2020-27634US | critical9.1OT elevated | — | ||
In Contiki 4.5, TCP ISNs are improperly random. | ||||
| CVE-2020-27633US | critical9.1OT elevated | — | ||
In FNET 4.6.3, TCP ISNs are improperly random. | ||||
| CVE-2020-27631US | critical9.8OT elevated | — | ||
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random. | ||||
| CVE-2020-27630US | critical9.8OT elevated | — | ||
In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random. | ||||
| CVE-2020-27213US | high7.5OT elevated | — | ||
An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As… | ||||
| CVE-2020-27632US | high7.5OT elevated | — | ||
In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessi… | ||||
| CVE-2020-28388US | medium5.3OT elevated | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan