CVE-2021-31401 Integer overflow in n/a
A crafted IP packet causes an integer overflow in the TCP header processing, potentially leading to denial of service in InterNiche embedded systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-31401?
CVE-2021-31401 is a high-severity vulnerability in n/a, published on 19 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the IP data length is calculated by subtracting the length of the header from the total length of the IP packet.
Weakness: CWE-20
Which versions are affected by CVE-2021-31401?
It affects 3 products.
Products include Hcc-Embedded Nichestack, Siemens Sentron 3wa Com190 Firmware, Siemens Sentron 3wl Com35 Firmware.
How do I fix CVE-2021-31401?
No fix has been published for CVE-2021-31401 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-31401 being exploited?
There is no known exploitation of CVE-2021-31401 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-jggm-qmcw-j5f5.