CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-31401
High (7.5). EPSS 2.3% chance of exploitation in the next 30 days.
An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the IP data length is calculated by subtracting the length of the header from the total length of the IP packet.
Severity
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hcc-embedded:nichestack
- siemens:sentron_3wa_com190_firmware
- siemens:sentron_3wl_com35_firmware
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-789208.pdf
- https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
- https://www.kb.cert.org/vuls/id/608209
- https://cert-portal.siemens.com/productcert/pdf/ssa-789208.pdf
- https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/