CVE-2021-27393CWE-330

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including…

published April 22, 2021

CVSS
—
EPSS
1%
Percentile
54.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00751 · 54.5th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2021-04-22T20:42Z
EPSS history
Timeline
  • 22 APR 20:42Z
    A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including…
    cvelistv5