Nut/OS TCP/IP Security Issue

Mingshu Wang <[email protected]> Tue, 13 Oct 2020 18:41:12 +0000
Newsgroups gmane.comp.hardware.microcontrollers.ethernut
Message-ID <CH2PR18MB32542C3D91F572B070EA52EBB0040@CH2PR18MB3254.namprd18.prod.outlook.com>
We have a product developed with Nut/OS 4.8.7 long time ago. We got a customer complaint recently about the TCP/IP stack security issue.


Below is the message from the customer.



Here is the CVE numbers that the alert fell under:

CVE-2020-11896/CVE-2020-11898

The vulnerability scanner used was Tenable.SC.


Did anyone see this issue before? Will the new Nut/OS take care of this problem?


Thanks,

Mingshu

_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion