CVE-2020-25928
highpriority · track · 40stack campaign · INFRA:HALTEPSS 0.036 · 89 %ileEURUUSEPSS · scored 2026-10-27
The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS response processing functions: dns_upcall(), getoffset(), dnc_set_answer(). The attack vector is: a specific DNS response packet. The code does not check the "response data length" field of individual DNS answers, which may cause out-of-bounds read/write operations, leading to Information leak, Denial-or-Service, or Remote Code Execution, depending on the context.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedInterNiche stackcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-022_en.pdf - FixedNicheLitecisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-022_en.pdf
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (8)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-21-217-01HCC Embedded InterNiche TCP/IP stack, NicheLite (Update B)2021-08-05icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may result in unauthorized access to arbitrary information, DNS cache poisoning, remote code execution, or a denial-of-service condition.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- https://us-cert.cisa.gov/ics/advisories/icsa-21-217-01cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.2661cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021080402cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021080607cnnvd
- https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/cnnvd
- https://www.kb.cert.org/vuls/id/608209cnnvd
- https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/enisa_euvd
- https://www.kb.cert.org/vuls/id/608209enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan