CVE-2020-27213

highPriorität · verfolgen · 30OT-Risiko · erhöhtStack-Kampagne · NUMBER:JACKEPSS 0.010 · 62. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.97% (62nd) EPSS

CVSS 7.5 · high

Is it mine?

35 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing ones or spoof future ones. While the ISN generator seems to adhere to RFC 793 (where a global 32-bit counter is incremented roughly every 4 microseconds), proper ISN generation should aim to follow at least the specifications outlined in RFC 6528.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCapital VSTARcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenCycloneTCPcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenFNETcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenMPLAB Netcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenNDKTCPIPcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenNucleus NET Allcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenNucleus ReadyStart for ARM MIPS and PPCcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenNucleus Source Codecisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenNut/Netcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenpicoTCP (EOL)cisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenpicoTCP-NGcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenuC/TCP-IP (EOL)cisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenuIP (EOL)cisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenuIP-Contiki-NGcisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
BehobenuIP-Contiki-OS (end-of-life [EOL])cisa_csaf_ot
uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.
MitigationCapital VSTARcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationCycloneTCPcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationFNETcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationMPLAB Netcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationNDKTCPIPcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationNucleus NET Allcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationNucleus ReadyStart for ARM MIPS and PPCcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationNucleus Source Codecisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationNut/Netcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationpicoTCP (EOL)cisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationpicoTCP-NGcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationuC/TCP-IP (EOL)cisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationuIP (EOL)cisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationuIP-Contiki-NGcisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.
MitigationuIP-Contiki-OS (end-of-life [EOL])cisa_csaf_ot
Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · CISA US

v3.16.5mediumAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-330USprimärCWE-330USCWE-330US

betroffene Produkte (35)

Betroffene Produkte und Versionsbereiche.

Open Source TCP/IP Stackalle Versionencert_bundDEcpe:/a:open_source:tcpip_stack:-
Siemens Nucleus RTOSalle Versionencert_bundDEcpe:/o:siemens:nucleus_rtos:-
Capital VSTAR: All Versionsalle Versionencisa_csaf_otUS
CycloneTCP: Version 1.9.6 and prioralle Versionencisa_csaf_otUS
FNET: Version 4.6.3alle Versionencisa_csaf_otUS
MPLAB Net: Version 3.6.1 and prioralle Versionencisa_csaf_otUS
NDKTCPIP: Version 2.25 and prioralle Versionencisa_csaf_otUS
Nucleus NET All: versions prior to Version 5.2alle Versionencisa_csaf_otUS
Nucleus ReadyStart for ARM MIPS and PPC: All versions prior to Version 2012.12alle Versionencisa_csaf_otUS
Nucleus Source Code: All Versionsalle Versionencisa_csaf_otUS
Nut/Net: Version 5.1 and prioralle Versionencisa_csaf_otUS
picoTCP (EOL): Version 1.7.0 and prioralle Versionencisa_csaf_otUS
picoTCP-NG: Version 1.7.0 and prioralle Versionencisa_csaf_otUS
uC/TCP-IP (EOL): Version 3.6.0 and prioralle Versionencisa_csaf_otUS
uIP (EOL): Version 1.0 and prioralle Versionencisa_csaf_otUS
uIP-Contiki-NG: Version 4.5 and prioralle Versionencisa_csaf_otUS
uIP-Contiki-OS (end-of-life [EOL]): Version 3.0 and prioralle Versionencisa_csaf_otUS
multiple Capital VSTARalle Versionencisa_csaf_otUS
multiple CycloneTCP≤ 1.9.6cisa_csaf_otUS
multiple FNETalle Versionencisa_csaf_otUS

20 von 35 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2023-1987TCP/IP Stack: Mehrere SchwachstellenDeutsch2021-02-11csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TCP/IP Stack ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand herbeiführen oder Sicherheitsvorkehrungen umgehen.
ICSA-21-042-01Multiple Embedded TCP/IP Stacks (Update B)2021-02-11icsa · cisa_csaf_otUS
Successful exploitation of weak initial sequence numbers (ISN) can be used to hijack or spoof TCP connections, cause denial-of-service conditions, inject malicious data, or bypass authentication.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2023-10-10geändert 2026-06-17

verwandt (573)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2019-5420US	critical9.8OT kritisch	89.3% (100th)	Exploit	2019-03-27
A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. Thi…
CVE-2021-34646US	critical9.8OT hoch	50.9% (99th)	Exploit	2021-08-30
Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a r…
CVE-2018-17888US	critical9.8OT hoch	29.6% (98th)	Exploit	2018-10-12
NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary…
CVE-2017-6026US	critical9.1OT hoch	31.8% (98th)	Exploit	2017-06-30
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware…
CVE-2022-36536US	critical9.8OT hoch	4.85% (92nd)	Exploit	2022-09-16
An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating cra…

+568 weitere

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan