← Back

Cyclonetcp

cyclonetcp

Vendor: Oryx Embedded • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oryx Embedded
1Cyclonetcp
Jun 17, 2026
Oct 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.
1Oryx Embedded
1Cyclonetcp
Jun 17, 2026
Mar 8, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to t...Show more
Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug.Show less