CVE-2021-36762

CVE-2021-36762 is a high-severity vulnerability affecting HCC Embedded InterNiche NicheStack through version 4.3. It stems from improper null termination in the tfshnd() TFTP packet processing function, which can lead to out-of-bounds reads when strlen is called on a filename. This vulnerability has a CVSS score of 7.5, indicating a high risk, as it can be exploited remotely over the network with low attack complexity and without requiring user interaction or privileges, potentially leading to a complete loss of confidentiality. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.