HCC Embedded InterNiche 缓冲区错误漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche. The vulnerability stems from the TCP/IP stack parsing HTTP POST request code and can be exploited by an attacker to cause a cache heap overflow...

HCC Embedded InterNiche TCP/IP stack, NicheLite (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: HCC Embedded Equipment: InterNiche stack NicheStack, NicheLite Vulnerabilities: Return of Pointer Value Outside of Expected Range, Improper Handling of Length Parameter Inconsistency, Use of...

Unspecified Vulnerability in Siemens Interniche IP Stack Low Voltage Devices

The SENTRON 3WA COM190 is an accessory module for 3WA circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 3WL COM35 is an accessory module for 3WL circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 7KM PAC The Switched Ethernet PROFIN...

HCC Embedded InterNiche 安全特征问题漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that stems from a DNS client not setting enough random transaction ids in the DNSv4 component.An attacker can exploit this vulnerability to pass specially crafted inputs to the application...

HCC Embedded InterNiche 缓冲区错误漏洞

InterNiche Technologies NicheStack is a small footprint, RFC-compliant embedded stack that is portable to commercial or proprietary non-MMU operating systems. InterNiche Technologies NicheStack suffers from an input validation error vulnerability that stems from a boundary condition in the ICMP...

HCC Embedded InterNiche 输入验证错误漏洞

InterNiche Technologies NicheStack is a small footprint, RFC-compliant embedded stack that is portable to commercial or proprietary non-MMU operating systems. InterNiche Technologies NicheStack suffers from an input validation error vulnerability that exists due to insufficient validation of...

HCC Embedded InterNiche 缓冲区错误漏洞

HCC Embedded InterNiche is a newsletter software. An out-of-bounds read vulnerability exists in the HCC Embedded InterNiche stack and NicheLite, which can be exploited by an attacker to cause an out-of-bounds read...

HCC Embedded InterNiche 安全特征问题漏洞

HCC Embedded InterNiche is a newsletter software. An unspecified vulnerability exists in HCC Embedded InterNiche, which can be exploited to allow an attacker to be able to predict the source port of a DNS query, and then send spoofed DNS response packets that may be accepted as valid answers...

HCC Embedded InterNiche 安全特征问题漏洞

The SENTRON 3WA COM190 is an accessory module for 3WA circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 3WL COM35 is an accessory module for 3WL circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 7KM PAC The Switched Ethernet PROFIN...

HCC Embedded InterNiche 缓冲区错误漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that originates from a boundary condition in the DNSv4 component. An attacker can exploit the vulnerability to trigger an out-of-bounds read error and cause a denial of service on the syst...

HCC Embedded InterNiche缓冲区错误漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche, which can be exploited by attackers to cause read/write out of bounds...

PT-2021-3861 · Hcc Embedded · Nichestack

Name of the Vulnerable Software and Affected Versions: HCC Embedded InterNiche NicheStack versions through 4.3 Description: The issue is related to errors in handling TFTP packet processing in the NicheLite and InterNiche TCP/IP stacks, specifically with null-termination of strings or arrays. Thi...

PT-2021-3969

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description An issue was discovered in the tcp pulloutofband function in tcp in.c related to the processing of out-of-band urgent-data in TCP. This issue can cause a panic function to be invoked if the...

PT-2021-3981

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description The issue allows an attacker to predict a DNS query's source port, enabling them to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests. This is...

PT-2021-3862

Name of the Vulnerable Software and Affected Versions InterNiche NicheStack TCP/IP version 4.0.1 Description The DNS client in InterNiche NicheStack TCP/IP is affected by insufficient entropy in the DNS transaction id, which can lead to DNS cache poisoning. The component dns query type is involve...

PT-2021-3973

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description A potential heap buffer overflow exists in the code that parses the HTTP POST request due to a lack of size validation. This issue requires an attacker to send a crafted HTTP POST request with ...

PT-2021-3970

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description The issue is related to an incorrect signed integer comparison when handling HTTP requests, which can lead to a potential heap buffer overflow. This can be exploited by sending a malformed HTTP...

PT-2021-3977

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description The issue is related to insufficient input validation in the TCP/IP stack implementation of NicheLite and InterNiche. This can be exploited by a remote attacker to cause a denial of service by...

PT-2021-3974

Name of the Vulnerable Software and Affected Versions InterNiche NicheStack TCP/IP version 4.0.1 Description The issue is related to errors in processing input data length parameters in the DNS client of InterNiche NicheStack TCP/IP. Exploitation of this issue may allow a remote attacker to execu...

PT-2021-3980

Name of the Vulnerable Software and Affected Versions InterNiche NicheStack versions 4.0.1 and earlier Description The web server in InterNiche NicheStack allows remote attackers to cause a denial of service, resulting in an infinite loop and networking outage, via an unexpected valid HTTP reques...