CVE-2020-25926

The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). The attack vector is: a specific DNS response packet.

• CWE-331

• https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/Mitigation, Third Party Advisory
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/Mitigation, Third Party Advisory
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource

Published

Aug 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25911A XML External Entity (XXE) vulnerability was discovered in …9.1
• CVE-2020-25912A XML External Entity (XXE) vulnerability was discovered in …9.1
• CVE-2020-25915Cross Site Scripting (XSS) vulnerability in UserController.p…5.4
• CVE-2020-25917Stratodesk NoTouch Center before 4.4.68 is affected by: Inco…8.8
• CVE-2020-2592Vulnerability in the Oracle AutoVue product of Oracle Supply…5.3
• CVE-2020-25925Cross Site Scripting (XSS) in Webmail Calender in IceWarp We…6.1
• CVE-2020-25927The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is aff…7.5
• CVE-2020-25928The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is aff…9.8
• CVE-2020-2593Vulnerability in the Java SE, Java SE Embedded product of Or…4.8
• CVE-2020-2594Vulnerability in the Primavera P6 Enterprise Project Portfol…6.5
• CVE-2020-2595Vulnerability in the Oracle GraalVM Enterprise Edition produ…5.8
• CVE-2020-25950Advanced Webhost Billing System 3.7.0 is affected by Cross S…4.3