Nine DNS Vulnerabilities Discovered in Four Open Source TCP/IP Stacks (NAME:WRECK)

On April 13, researchers from Forescout and JSOF published a new report entitled NAME:WRECK. This report is the continuation of research centered around TCP/IP stacks embedded in millions of operational technology (OT), internet of things (IoT) and IT devices. Previous research includes NUMBER:JACK, AMNESIA:33 and Ripple20.

There were nine new vulnerabilities identified across four open-source TCP/IP stacks including IPNet, Nucleus NET, NetX and FreeBSD. The impact from these vulnerabilities include DNS Cache Poisoning, Denial of Service and Remote Code Execution.

For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.