Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 2.3% | — | Hcc-embedded NichestackSiemens Sentron 3WL Com35 FirmwareSiemens Sentron 3WA Com190 Firmware | 19/8/2021 | 17/6/2026 | An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the IP data length is calculated by… | |
| Modificada | Crítica (9.1) | 2.1% | — | Hcc-embedded NichestackSiemens Sentron 3WA Com190 FirmwareSiemens Sentron 3WL Com35 Firmware | 19/8/2021 | 17/6/2026 | An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing ones or spoof… | |
| Modificada | Alta (7.5) | 2.3% | — | Hcc-embedded NichestackSiemens Sentron 3WL Com35 FirmwareSiemens Sentron 3WA Com190 Firmware | 19/8/2021 | 17/6/2026 | An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the length of the TCP payload within the TCP checksum computation function. When the IP payload size is set to be smaller than the size of the IP… |