114 matches found
CVE-2023-45237: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...
CVE-2020-27631
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...
CVE-2020-27213
An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...
CVE-2020-27631
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...
Code injection
An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...
Design/Logic Flaw
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...
CVE-2020-27635
In PicoTCP 1.7.0, TCP ISNs are improperly random...
CVE-2020-27633
CVE-2020-27633 affects FNET 4.6.3, where TCP Initial Sequence Numbers (ISNs) are generated with insufficient randomness, enabling potential spoofing or disruption of TCP connections. The vulnerability is caused by a predictable ISN generation in FNET’s TCP stack, with no explicit exploitation det...
CVE-2020-27213
An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...
CVE-2020-27213: Use of Insufficiently Random Values
An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...
CVE-2020-27213
CVE-2020-27213 affects Ethernut Nut/OS 5.1 where ISN generation for TCP is derived from a insufficiently random source, enabling an attacker to determine ISN values for current and future connections and potentially hijack or spoof TCP connections. The issue is documented across multiple trusted ...
CVE-2020-27213
An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...
CVE-2020-27635
CVE-2020-27635 affects PicoTCP 1.7.0, where ISN (Initial Sequence Number) generation is improperly random, using a predictable/linear-congruential approach. This weakness can enable spoofing or disruption of TCP connections, potentially aiding unauthorized access or data exposure. The CVSS base s...
K19063943: TCP initial sequence number vulnerability CVE-2001-0328
Security Advisory Description TCP implementations that use random increments for initial sequence numbers ISN can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN. CVE-2001-0328...
K15301: Linux kernel TCP ISN vulnerability CVE-2011-3188
Security Advisory Description The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack...
CVE-2022-43501
KASAGO TCP/IP stack provided by Zuken Elmic generates ISNsInitial Sequence Number for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones...
Buffer overflow
KASAGO TCP/IP stack provided by Zuken Elmic generates ISNsInitial Sequence Number for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones...
CVE-2022-43501
CVE-2022-43501 concerns the KASAGO TCP/IP stack from Zuken Elmic, which uses an insufficiently random generator for TCP Initial Sequence Numbers (ISNs). This weak RNG can allow an attacker to determine ISNs for current or future connections, enabling session hijacking or spoofing of new connectio...
KASAGO IPv6/v4 Dual 安全特征问题漏洞
KASAGO IPv6/v4 Dual is KASAGO's protocol middleware for TCP/IP communication. A security vulnerability exists in KASAGO IPv6/v4 Dual that stems from an insufficiently randomized ISN Initial Sequence Number. An attacker can exploit this vulnerability to predict the value of the ISN...