Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Contiki-NG 安全漏洞
Vulnerability Description
Contiki-NG是一套用于下一代IoT(物联网)设备的开源跨平台操作系统。 Contiki-NG tinyDTLS 2018-08-30 版本及之前版本存在安全漏洞,该漏洞源于 DTLS 服务器允许远程攻击者在 TCP 最大分段生命周期的两倍内重复使用相同的编号。
CVSS Information
N/A
Vulnerability Type
N/A