CVE-2020-25767

Published: Aug 18, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a domain name compression pointer is pointing within the bounds of the packet (e.g., forward compression pointer jumps are allowed), which leads to an Out-of-bounds Read, and a Denial-of-Service as a consequence.

Affected (1)

Products: Hcc Embedded: Nichestack Ipv4

1 product

Nichestack Ipv4

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hcc Embedded Nichestack Ipv4	Version 4.1

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (4)

https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/

Source: cve@mitre.org

MitigationThird Party Advisory

https://www.kb.cert.org/vuls/id/608209

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party Advisory

https://www.kb.cert.org/vuls/id/608209

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.