Information disclosure

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

CVE-2021-45488

The CVE-2021-45488 issue affects NetBSD up to 9.2, involving an information leak in the TCP ISN (ISS) generation algorithm within the IP/TCP stack. The root cause is an information disclosure flaw in how ISNs are generated, enabling partial exposure of sensitive data. Publicly documented details ...

CVE-2021-45488: Use of Insufficiently Random Values

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

Vulnerability of the Siemens LOGO! CMR family and SIMATIC RTU 3000 family security feature issues

The LOGO! CMR family is a communication system for monitoring and controlling distributed devices and systems via text messages or e-mail.Siemens SIMATIC RTU3000C is a compact RTU from Siemens, Germany is a low-power remote terminal unit RTU for energy self-sufficiency. A vulnerability in the...

CVE-2021-37186

A vulnerability has been identified in LOGO! CMR2020 All versions V2.2, LOGO! CMR2040 All versions V2.2, SIMATIC RTU3010C All versions V4.0.9, SIMATIC RTU3030C All versions V4.0.9, SIMATIC RTU3031C All versions V4.0.9, SIMATIC RTU3041C All versions V4.0.9. The underlying TCP/IP stack does not...

Information disclosure

A vulnerability has been identified in LOGO! CMR2020 All versions V2.2, LOGO! CMR2040 All versions V2.2, SIMATIC RTU3010C All versions V4.0.9, SIMATIC RTU3030C All versions V4.0.9, SIMATIC RTU3031C All versions V4.0.9, SIMATIC RTU3041C All versions V4.0.9. The underlying TCP/IP stack does not...

CVE-2021-37186

Summary of CVE-2021-37186 : Siemens LOGO! CMR2020/CMR2040 and SIMATIC RTU3000 family implement an insufficiently random Initial Sequence Number (ISN) generator in their TCP/IP stack. This can allow an adjacent attacker with LAN access to interfere with traffic, spoof connections, and potentially ...

CVE-2021-37186: Use of Insufficiently Random Values

A vulnerability has been identified in LOGO! CMR2020 All versions V2.2, LOGO! CMR2040 All versions V2.2, SIMATIC RTU3010C All versions V4.0.9, SIMATIC RTU3030C All versions V4.0.9, SIMATIC RTU3031C All versions V4.0.9, SIMATIC RTU3041C All versions V4.0.9. The underlying TCP/IP stack does not...

Siemens SIMATIC 安全特征问题漏洞

The LOGO! CMR family is a communication system for monitoring and controlling distributed devices and systems via text messages or e-mail.Siemens SIMATIC RTU3000C is a compact RTU from Siemens, Germany is a low-power remote terminal unit RTU for energy self-sufficiency. A vulnerability in the...

CVE-2020-35685

An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing...

Code injection

An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing...

CVE-2020-35685

CVE-2020-35685 affects HCC Nichestack/NicheStack up to versions preceding 4.3, where ISNs are generated from an insufficiently random source. This enables an attacker to potentially hijack existing TCP connections or spoof future ones, as ISN predictability undermines TCP security. The ICS/CISA a...

CVE-2020-35685

An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing...

CVE-2020-35685: Use of Insufficiently Random Values

An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

Code injection

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632: Undefined Security Weakness

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

The CVE-2020-27632 issue affects the SIMATIC MV400 family prior to v7.0.6. The root cause is that the ISN generator is initialized with a constant value and uses constant increments, making initial sequence numbers highly predictable. This can enable an attacker to predict and hijack TCP sessions...