Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). The attack vector is: a specific DNS response packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HCC Embedded InterNiche 安全特征问题漏洞
Vulnerability Description
HCC Embedded InterNiche是一款时事通讯软件。 HCC Embedded InterNiche NicheStack 存在安全特征问题漏洞,该漏洞源于DNS客户端没有在DNSv4组件中设置足够的随机事务id。攻击者可利用该漏洞向应用程序传递特制的输入,并执行缓存中毒攻击。
CVSS Information
N/A
Vulnerability Type
N/A