CVE-2020-27213

An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...

CVE-2020-27213

CVE-2020-27213 affects Ethernut Nut/OS 5.1 where ISN generation for TCP is derived from a insufficiently random source, enabling an attacker to determine ISN values for current and future connections and potentially hijack or spoof TCP connections. The issue is documented across multiple trusted ...