Embedded TCP/IP stacks have memory corruption vulnerabilities

ronjor · Mar 10, 2021

Vulnerability Note VU#815128
Original Release Date: 2020-12-08 | Last Revised: 2021-03-10

Overview
Multiple open-source embedded TCP/IP stacks, commonly used in Internet of Things (IoT) and embedded devices, have several vulnerabilities stemming from improper memory management. These vulnerabilities are also tracked as ICS-VU-633937 and JVNVU#96491057 as well as the name AMNESIA:33.
Click to expand...

Solution
Apply updates
Update to the latest stable version of the affected embedded TCP/IP software that address these recently disclosed vulnerabilities. If you have adopted this software from an upstream provider, contact the provider to get appropriate updates that need to be integrated into your software. Concerned end-users of IoT and embedded devices that implement these vulnerable TCP/IP software stacks should contact their vendor or the closest reseller to obtain appropriate updates.
Click to expand...

Log in or Sign up

Embedded TCP/IP stacks have memory corruption vulnerabilities

ronjor Global Moderator

Log in or Sign up

Embedded TCP/IP stacks have memory corruption vulnerabilities

ronjor Global Moderator

Useful Searches