An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the ICMP checksum. When the IP payload size is set to be smaller than the size of the IP header, the ICMP checksum computation function may read out of bounds, causing a Denial-of-Service.
Se ha detectado un problema en HCC Nichestack versión 3.0. El código que analiza los paquetes ICMP se basa en un valor no comprobado del tamaño de la carga útil IP (extraído del encabezado IP) para calcular la suma de comprobación ICMP. Cuando el tamaño de la carga útil IP está configurado para ser más pequeño que el tamaño del encabezado IP, la función de cálculo de la suma de comprobación ICMP puede leer fuera de límites, causando una Denegación de Servicio.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-125
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| hcc-embedded | nichestack | 3.0 | <built-in method update of dict object at 0x7e60bb884d40> | Application |
| siemens | 7km9300-0ae02-0aa0_firmware | * | <built-in method update of dict object at 0x7e60bb884400> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:hcc-embedded:nichestack:3.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:7km9300-0ae02-0aa0_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:7km9300-0ae02-0aa0:-:*:*:*:*:*:*:* |