VYPR

Sentron 3wa Com190 Firmware

by Siemens Foundation

CVEs (3)

  • CVE-2020-35685CriAug 19, 2021
    risk 0.59cvss 9.1epss 0.02

    An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and…

  • CVE-2021-31401HigAug 19, 2021
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the…

  • CVE-2020-35684HigAug 19, 2021
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the length of the TCP payload within the TCP checksum computation function. When the IP payload size is…