Vulnetix
Try Vulnetix Request Demo
CVE-2021-31228 PUBLISHED CVSS 5 MEDIUM

An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests (without sniffing the specific request). Data is predictable because it is based on the time of day, and has too few bits.

EPSS 0.28% · 51.2th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.28%
51.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
hcc-embeddednichestack0

Timeline

References

Open in Interactive Console →