CVE-2020-27213 - CVE House
Back to Database
Status published High CVE-2020-27213

An issue was discovered in Ethernut Nut/OS 5.1. The code...

Vulnerability Description

An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing ones or spoof future ones. While the ISN generator seems to adhere to RFC 793 (where a global 32-bit counter is incremented roughly every 4 microseconds), proper ISN generation should aim to follow at least the specifications outlined in RFC 6528.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-27213

Credits & Attribution

No credits recorded in the NVD database.

References

More from ethernut

View All →
CVE-2020-25110
An issue was discovered in the DNS implementation in Ethernut...
Critical 9.8
CVE-2020-25109
An issue was discovered in the DNS implementation in Ethernut...
Critical 9.8
CVE-2020-25108
An issue was discovered in the DNS implementation in Ethernut...
Critical 9.8
CVE-2020-25107
An issue was discovered in the DNS implementation in Ethernut...
Critical 9.8

Affected Vendor

Affected Software

nut\/os
Vulnerable Versions:
5.1

Timeline

Official Publish: October 10th, 2023
Last Modified: September 19th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.