CVE-2021-31228
Summary
| CVE | CVE-2021-31228 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-08-19 11:15:00 UTC |
|---|
| Updated | 2022-07-12 17:42:00 UTC |
|---|
| Description | An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests (without sniffing the specific request). Data is predictable because it is based on the time of day, and has too few bits. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| New Critical Operational Technology Vulnerabilities Found on NicheStack – Mitigation Advised - Forescout |
MISC |
www.forescout.com |
|
| VU#608209 - NicheStack embedded TCP/IP has vulnerabilities |
CERT-VN |
www.kb.cert.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 591068 Rockwell Automation Products INFRA:HALT Interniche Multiple Vulnerabilities (PN1575)
