NUMBER:JACK: Nine vulnerabilities discovered across multiple TCP/IP stacks

Researchers at Forescout recently published NUMBER:JACK, a report detailing their discovery of nine vulnerabilities across nine TCP/IP stacks embedded in millions of operational technology (OT), internet-of-things (IoT) and IT devices. It follows in the footsteps of AMNESIA:33, another research report that uncovered 33 vulnerabilities across four of the nine TCP/IP stacks analyzed in NUMBER:JACK.

Of the nine vulnerabilities disclosed, all but one received a CVSSv3 score of 7.5. Compared to the vulnerabilities disclosed in AMNESIA:33, the NUMBER:JACK flaws are not as critical, but they are much easier for attackers to identify, making them more likely to be exploited.

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.