https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:42:07 +0000 https://cve.radiocsirt.org/vuln/cve-2020-28388 <p><strong>Affected:</strong> Siemens APOGEE PXC Compact (BACnet), Siemens APOGEE PXC Compact (P2 Ethernet), Siemens APOGEE PXC Modular (BACnet), Siemens APOGEE PXC Modular (P2 Ethernet), Siemens Nucleus NET, Siemens Nucleus ReadyStart V3, Siemens Nucleus Source Code, Siemens PLUSCONTROL 1st Gen, Siemens TALON TC Compact (BACnet), Siemens TALON TC Modular (BACnet)</p> <p>A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions &lt; V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions &lt; V2.8.20), APOGEE PXC Modular (BACnet) (All versions &lt; V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions &lt; V2.8.20), Nucleus NET (All versions &lt; V5.2), Nucleus ReadyStart V3 (All versions &lt; V2012.12), Nucleus Source Code (All versions), PLUSCONTROL 1st Gen (All versions), TALON TC Compact (BACnet) (All versions &lt; V3.5.5), TALON TC Modular (BACnet) (All versions &lt; V3.5.5). Initial Sequence Numbers (ISNs) for TCP connections are derived from an insufficiently random source. As a result, the ISN of current and future TCP connections could be predictable. An attacker could hijack existing sessions or spoof future ones.</p> <p><strong>Affected:</strong> Siemens APOGEE PXC Compact (BACnet), Siemens APOGEE PXC Compact (P2 Ethernet), Siemens APOGEE PXC Modular (BACnet), Siemens APOGEE PXC Modular (P2 Ethernet), Siemens Nucleus NET, Siemens Nucleus ReadyStart V3, Siemens Nucleus Source Code, Siemens PLUSCONTROL 1st Gen, Siemens TALON TC Compact (BACnet), Siemens TALON TC Modular (BACnet)</p> <p>A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions &lt; V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions &lt; V2.8.20), APOGEE PXC Modular (BACnet) (All versions &lt; V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions &lt; V2.8.20), Nucleus NET (All versions &lt; V5.2), Nucleus ReadyStart V3 (All versions &lt; V2012.12), Nucleus Source Code (All versions), PLUSCONTROL 1st Gen (All versions), TALON TC Compact (BACnet) (All versions &lt; V3.5.5), TALON TC Modular (BACnet) (All versions &lt; V3.5.5). Initial Sequence Numbers (ISNs) for TCP connections are derived from an insufficiently random source. As a result, the ISN of current and future TCP connections could be predictable. An attacker could hijack existing sessions or spoof future ones.</p> https://cve.radiocsirt.org/vuln/cve-2020-28388 https://cve.radiocsirt.org/vuln/icsa-21-042-01 <p>Nut/Net software relies on highly predictable source values and has consistent increments when generating initial sequence numbers (ISN), which may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27213 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). uC/TCP-IP ISN generation relies on a linear congruential generator (LCG), which is reversable from observed output streams as the algorithm is seeded with publicly recoverable information. This defect may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27630 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). CycloneTCP ISN generation relies on a linear congruential generator (LCG), which is reversable from observed output streams as the algorithm is seeded with publicly recoverable information. This defect may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27631 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). NDKTCPIP software is initialized with a consistent value and has consistent increments when generating initial sequence numbers (ISN), which may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27632 has been assigned to this vulnerability. A CVSS v3 bas…</p> <p>Nut/Net software relies on highly predictable source values and has consistent increments when generating initial sequence numbers (ISN), which may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27213 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). uC/TCP-IP ISN generation relies on a linear congruential generator (LCG), which is reversable from observed output streams as the algorithm is seeded with publicly recoverable information. This defect may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27630 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). CycloneTCP ISN generation relies on a linear congruential generator (LCG), which is reversable from observed output streams as the algorithm is seeded with publicly recoverable information. This defect may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27631 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). NDKTCPIP software is initialized with a consistent value and has consistent increments when generating initial sequence numbers (ISN), which may allow an attacker to spoof or disrupt TCP connections.CVE-2020-27632 has been assigned to this vulnerability. A CVSS v3 bas…</p> https://cve.radiocsirt.org/vuln/icsa-21-042-01