CVE-2001-0162 - WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attack

CVE-2001-0162

Summary

WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

References

Vulnerable Configurations

cpe:2.3:o:microsoft:windows_embedded_compact:3.0.9348:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_embedded_compact:3.0.9348:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

misc

http://www.cs.jhu.edu/~seny/pubs/wince802.pdf

Last major update

15-12-2023 - 19:06

Published

01-01-2001 - 05:00

Last modified

15-12-2023 - 19:06