CVE-2021-31400

An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-data processing function invokes a panic function if the pointer to the end of the out-of-band data points outside of the TCP segment's data. If the panic function hadn't a trap invocation removed, it will enter an infinite loop and therefore cause DoS (continuous loop or a device reset).

• CWE-835

• https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/Mitigation, Third Party Advisory
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/Mitigation, Third Party Advisory
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource

Published

Aug 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31383In Point to MultiPoint (P2MP) scenarios within established s…7.5
• CVE-2021-31384Due to a Missing Authorization weakness and Insufficient Gra…10
• CVE-2021-31385An Improper Limitation of a Pathname to a Restricted Directo…8.8
• CVE-2021-31386A Protection Mechanism Failure vulnerability in the J-Web HT…5.9
• CVE-2021-3139In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.…8.1
• CVE-2021-31399On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can p…5.9
• CVE-2021-31401An issue was discovered in tcp_rcv() in nptcp.c in HCC embed…7.5
• CVE-2021-31402The dio package 4.0.0 for Dart allows CRLF injection if the …7.5
• CVE-2021-31403Non-constant-time comparison of CSRF tokens in UIDL request …2.5
• CVE-2021-31404Non-constant-time comparison of CSRF tokens in UIDL request …2.5
• CVE-2021-31405Unsafe validation RegEx in EmailField component in com.vaadi…7.5
• CVE-2021-31406Non-constant-time comparison of CSRF tokens in endpoint requ…2.5