Security Advisory

CVE-2021-31228

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-19 10:51:21
Last updated 2024-08-03 22:55:53
Assigner mitre
State PUBLISHED

Description

An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS querys source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS clients requests (without sniffing the specific request). Data is predictable because it is based on the time of day, and has too few bits.