High severity · published Aug 19, 2021
CVE-2021-31401
An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1
7.5
CVSS
2.3%
EPSS
No
On KEV
Description
An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the IP data length is calculated by subtracting the length of the header from the total length of the IP packet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NI
Nichestack · Hcc-embedded
before 4.3 · source: NVD
S3
Sentron 3wa Com190 Firmware · Siemens
before 2.0.0 · source: NVD
S3
Sentron 3wl Com35 Firmware · Siemens
before 1.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-31401
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-31401
Mitigation
https://cert-portal.siemens.com/productcert/pdf/ssa-789208.pdf
Mitigation
https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
Third Party Advisory
https://www.kb.cert.org/vuls/id/608209
More from Nichestack
9.1
CVE-2020-35685
An issue was discovered in HCC Nichestack 3.0
7.5
CVE-2021-36762
An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3
7.5
CVE-2021-27565
The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking outage) via an unexpected valid HTTP…
7.5
CVE-2020-35684
An issue was discovered in HCC Nichestack 3.0
7.5
CVE-2020-35683
An issue was discovered in HCC Nichestack 3.0