PT-2021-3981
CVE-2021-31228
·
تاريخ النشر
2021-05-28
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
HCC embedded InterNiche version 4.0.1
Description
The issue allows an attacker to predict a DNS query's source port, enabling them to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests. This is possible because the data is predictable, based on the time of day, and has too few bits.
Recommendations
For HCC embedded InterNiche version 4.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾