CVE-2017-1000020

SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass. "eCos Embedded Web Servers used by Multiple Routers and Home devices, while sending SYN Flood or FIN Flood packets fails to validate and handle the packets and does not ask for any sign of authentication resulting in Authentication Bypass. An attacker can take complete advantage of this bug and take over the device remotely or locally. The bug has been successfully tested and reproduced in some versions of SOHO Routers manufactured by TOTOLINK, GREATEK and others."

• CWE-287

• http://ecos.sourceware.org/ecos/problemreport.htmlVendor Advisory
• http://ecos.sourceware.org/ecos/problemreport.htmlVendor Advisory

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000014phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weaknes…
• CVE-2017-1000015phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injecti…
• CVE-2017-1000016A weakness was discovered where an attacker can inject arbit…
• CVE-2017-1000017phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness whe…
• CVE-2017-1000018phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack…
• CVE-2017-1000019Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000021LogicalDoc Community Edition 7.5.3 and prior is vulnerable t…
• CVE-2017-1000022LogicalDoc Community Edition 7.5.3 and prior contain an Inco…
• CVE-2017-1000023LogicalDoc Community Edition 7.5.3 and prior is vulnerable t…
• CVE-2017-1000024Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is …
• CVE-2017-1000025GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6,…
• CVE-2017-1000026Chef Software's mixlib-archive versions 0.3.0 and older are …7.5