Design/Logic Flaw

The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service remote. The component is: DNS response processing in function: dnsupcall. The attack vector is: a specific DNS response packet. The code does not check whether the number o...

Remote code execution

The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: DNS response processing functions: dnsupcall, getoffset, dncsetanswer. The attack vector is: a specific DNS response packet. The code does not che...

CVE-2020-25928

The CVE-2020-25928 issue is in HCC Embedded’s InterNiche/NicheStack DNS response processing. The vulnerability stems from not validating the length of DNS answer data, which can cause out-of-bounds reads/writes in dns_upcall(), getoffset(), and dnc_set_answer(). This can enable information leakag...

CVE-2020-25928

The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: DNS response processing functions: dnsupcall, getoffset, dncsetanswer. The attack vector is: a specific DNS response packet. The code does not che...

CVE-2020-25927

The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service remote. The component is: DNS response processing in function: dnsupcall. The attack vector is: a specific DNS response packet. The code does not check whether the number o...

CVE-2020-25927

CVE-2020-25927 targets InterNiche/NicheStack TCP/IP (pre-4.3). The DNS response processing path dns_upcall() does not validate the DNS header’s query/response counts against the packet data, causing an out-of-bounds read and potential remote DoS. The ICS/CISA advisory Update B lists this issue am...

CVE-2020-25926

The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning remote. The component is: dnsquerytype. The attack vector is: a specific DNS response packet...

CVE-2020-25926

Summary of CVE-2020-25926 (INFRA:HALT) in HCC Embedded/NicheStack: The DNS client in InterNiche NicheStack TCP/IP (pre-4.3) suffers from insufficient entropy in DNS transaction IDs, enabling remote DNS cache poisoning via specially crafted responses. The related ICS/National advisories enumerate ...

Unspecified Vulnerability in HCC Embedded InterNiche

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche, which stems from a TCP emergency data handling function that may call a panic function, which can be exploited by an attacker to cause an infinite loop...

Unspecified Vulnerability in HCC Embedded InterNiche (CNVD-2021-59225)

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche stack versions prior to 4.3 and NicheLite versions prior to 4.3, which can be exploited by an attacker to cause an infinite loop that interrupts TCP/IP communication...

HCC Embedded InterNiche Out-of-Bounds Read Vulnerability

HCC Embedded InterNiche is a newsletter software. An out-of-bounds read vulnerability exists in the HCC Embedded InterNiche stack and NicheLite, which can be exploited by an attacker to cause an out-of-bounds read...

HCC Embedded InterNiche Security Feature Issue Vulnerability

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that stems from a DNS client not setting enough random transaction ids in the DNSv4 component.An attacker can exploit this vulnerability to pass specially crafted inputs to the application...

HCC Embedded InterNiche Buffer Overflow Vulnerability

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche, which can be exploited by attackers to cause read/write out of bounds...

HCC Embedded InterNiche Buffer Overflow Vulnerability (CNVD-2021-59231)

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that originates from a boundary condition in the DNSv4 component. An attacker can exploit the vulnerability to trigger an out-of-bounds read error and cause a denial of service on the syst...

Unspecified Vulnerability in HCC Embedded InterNiche (CNVD-2021-59227)

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche. The vulnerability stems from the TCP/IP stack parsing HTTP POST request code and can be exploited by an attacker to cause a cache heap overflow...

Unspecified Vulnerability in HCC Embedded InterNiche (CNVD-2021-59224)

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in the HCC Embedded InterNiche stack and NicheLite, which stems from the TFTP message processing feature that does not guarantee that filenames end in null, and can be exploited by an attacker to cause a denial of...

HCC Embedded InterNiche 安全漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche, which stems from a TCP emergency data handling function that may call a panic function, which can be exploited by an attacker to cause an infinite loop...

CISA Releases Security Advisory for InterNiche Products

CISA has released an Industrial Control Systems ICS advisory detailing multiple vulnerabilities in InterNiche products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the ICS Advisory ICSA-21-217-01...

Unspecified Vulnerability in Siemens Interniche IP Stack Low Voltage Devices

The SENTRON 3WA COM190 is an accessory module for 3WA circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 3WL COM35 is an accessory module for 3WL circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 7KM PAC The Switched Ethernet PROFIN...

HCC Embedded InterNiche Technologies NicheStack Input Validation Error Vulnerability (CNVD-2021-58800)

InterNiche Technologies NicheStack is a small footprint, RFC-compliant embedded stack that is portable to commercial or proprietary non-MMU operating systems. InterNiche Technologies NicheStack suffers from an input validation error vulnerability that exists due to insufficient validation of...