CVE search · CVE-2020-27631

CVE-2020-27631

critical 9.8

In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.

Open in the NVD CVE.org JSON

Status: Modified
Published: 2023-10-10
Last changed: 2026-06-17
Source: cve@mitre.org
Weakness: CWE-330

Severity

Version	Score	Vector	Source
CVSS 3.1	critical 9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`	nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

oryx-embedded · cyclonetcp

References

https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01Third Party AdvisoryUS Government Resource
https://www.forescout.comThird Party Advisory
https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01Third Party AdvisoryUS Government Resource
https://www.forescout.comThird Party Advisory
https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/Third Party Advisory