Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-284q-vmqr-cv75

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug.

Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug.

EPSS

Процентиль: 35%
0.00145
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
nvd
больше 4 лет назад

Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug.

EPSS

Процентиль: 35%
0.00145
Низкий

Дефекты

CWE-20