Nichestack
Vendor:
First CVE: Aug 19, 2021 · Active for 4 years
9
Total CVEs
More Total CVEs than 88% of tracked products
9.0
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 65% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Nichestack over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 19, 2021
4 years ago
Most Recent CVE
Aug 19, 2021
1,803 days ago
CVE Severity & Scoring
Nichestack9 CVEs
89%
11%
All CVEs352,785 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None9 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-35685CRITICAL An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As | Aug 19, 2021 | 9.1 | 27 | NO | NO |
CVE-2021-36762HIGH An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' | Aug 19, 2021 | 7.5 | 23 | NO | NO |
CVE-2021-31401HIGH An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header len | Aug 19, 2021 | 7.5 | 23 | NO | NO |
CVE-2021-27565HIGH The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking outage) via an unexpected valid HTTP reques | Aug 19, 2021 | 7.5 | 23 | NO | NO |
CVE-2020-35684HIGH An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the le | Aug 19, 2021 | 7.5 | 23 | NO | NO |
CVE-2020-35683HIGH An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the I | Aug 19, 2021 | 7.5 | 23 | NO | NO |
CVE-2021-31400HIGH An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-data processing function invokes a panic function if the poi | Aug 19, 2021 | 7.5 | 23 | NO | NO |
CVE-2021-31228HIGH An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets t | Aug 19, 2021 | 7.5 | 23 | NO | NO |
CVE-2021-31227HIGH An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to an incorrect signed integer | Aug 19, 2021 | 7.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Nichestack
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.0 | 3 | 8.0 | 2.2% | 0 | 0 |