ZeroHour

Vulnerabilities

2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2020-27631
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.

In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.

NVD description · AI analysis pending
9.81%
  • oryx-embedded cyclonetcp
CVE-2021-26788
Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS).

Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug.

NVD description · AI analysis pending
7.51%
  • oryx-embedded cyclonetcp