Hcc-Embedded

14 CVEs across 4 Hcc-Embedded products. Browse Hcc-Embedded vulnerabilities, severities, and proof-of-concept exploits.

Hcc-Embedded products with known CVEs

ProductCVEs
Nichestack9
Nichestack Tcp\/ip3
Interniche1
Nichestack Ipv41
Hcc-Embedded CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-36762High7.52021-08-19An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't ensure that a filenam…
CVE-2021-31401High7.52021-08-19An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total len…
CVE-2021-27565High7.52021-08-19The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking outage) via an unexpec…
CVE-2020-35685Critical9.12021-08-19An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficient…
CVE-2020-35684High7.52021-08-19An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP head…
CVE-2020-35683High7.52021-08-19An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP hea…
CVE-2021-31400High7.52021-08-19An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-data processing function invokes a pani…
CVE-2021-31228High7.52021-08-19An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged D…
CVE-2021-31227High7.52021-08-19An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to an inco…
CVE-2021-31226Critical9.82021-08-19An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of…
CVE-2020-25928Critical9.82021-08-18The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS re…
CVE-2020-25927High7.52021-08-18The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS re…
CVE-2020-25926High7.52021-08-18The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote…
CVE-2020-25767High7.52021-08-18An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a domain name compress…