PatchTheCVEhcc-embedded vulnerabilities
Recent CVEs affecting hcc-embedded products. 14 tracked.
hcc-embedded has 14 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 9. Most recent: 2021-08-19. Highest priority: CVE-2020-25928 (score 62/100).
- CVE-2021-36762 HIGH 7.5 UPGRADE An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3
- CVE-2021-31401 HIGH 7.5 UPGRADE UPGRADE An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1
- CVE-2021-31400 HIGH 7.5 UPGRADE An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1
- CVE-2021-31228 HIGH 7.5 UPGRADE An issue was discovered in HCC embedded InterNiche 4.0.1
- CVE-2021-31227 HIGH 7.5 UPGRADE An issue was discovered in HCC embedded InterNiche 4.0.1
- CVE-2021-31226 CRITICAL 9.8 DOWNGRADE An issue was discovered in HCC embedded InterNiche 4.0.1
- CVE-2021-27565 HIGH 7.5 UPGRADE The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (in
- CVE-2020-35685 CRITICAL 9.1 DOWNGRADE UPGRADE An issue was discovered in HCC Nichestack 3.0
- CVE-2020-35684 HIGH 7.5 DOWNGRADE UPGRADE An issue was discovered in HCC Nichestack 3.0
- CVE-2020-35683 HIGH 7.5 DOWNGRADE UPGRADE An issue was discovered in HCC Nichestack 3.0
- CVE-2020-25928 CRITICAL 9.8 DOWNGRADE The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow
- CVE-2020-25927 HIGH 7.5 DOWNGRADE The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read
- CVE-2020-25926 HIGH 7.5 DOWNGRADE The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transacti
- CVE-2020-25767 HIGH 7.5 DOWNGRADE An issue was discovered in HCC Embedded NicheStack IPv4 4.1
FAQ
How do I fix hcc-embedded vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hcc-embedded being exploited right now?
None of the tracked hcc-embedded CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hcc-embedded CVE should I patch first?
CVE-2020-25928 currently ranks highest (62/100): The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow.