Headline
CVE-2020-28388
A vulnerability has been identified in Capital VSTAR (All versions), Nucleus NET (All versions < V5.2), Nucleus ReadyStart V3 (All versions < V2012.12), Nucleus Source Code (All versions), PLUSCONTROL 1st Gen (All versions). Initial Sequence Numbers (ISNs) for TCP connections are derived from an insufficiently random source. As a result, the ISN of current and future TCP connections could be predictable. An attacker could hijack existing sessions or spoof future ones.
%PDF-1.5 %���� 55 0 obj << /Length 2684 /Filter /FlateDecode >> stream xڽZYs�F~ׯ�#X��}��E��r6��"�Ԗ���$�I�!@+���s� Qph���`���������>�ɛ�_�g�I2��dz�(����2 ���<��N�|���hL�N’�l���H�曟��-� &N���ݎ;˯��|3k._�����g��g�`’dǀ@��d�<��N����#ft��\&\0$8��"�������M+�aM���ŷ$�~xB2\����ADꠠ�ŘIJ$q(:dsB���[$�D��!4�@��cXb����|^̚���t�JA9A�ҡB܈)(J2���rL KL`ҕ�mY4E����Ur�� ���`,���xϊ�?7y9�Q> ���� R��H5 KJ�.�W���|=��P��iX�猀� "A(���3���({���4���B���Q������<��WQ|��se%���’�(�@��=k�^^�����.V3����A�’lH����˚lf�ӗ�H��̈́�7G��}�b8gj �Sru4R1 ���]��`���q=����0�� � �tؾ�8�/�MO� �M}��.��F��Q���P�+��e:�8}?q�Í= 5&6ɘ �o}��8d�(fYST��D/�&�Is�RL��16v t��/�-���v5���"Į����U���:/��#��|]�M��z�}�L���?�%���f��2��HA_Oz��(j��1���\ ^�iy28�2z���w7#�������O�flj��p��d�����ɡ�2o-�<��R���ŬZ��2(N����`���ի)��P�a���M�-��bvz��)�p�~P∤��k�60ʗ~�n𱳷�6�:�jA�d:K0e��s*a����;X�����$��Y���CL&[��-Jt�l�=� L�L������Ķ0"}�܀��|��5����txu7�Ƴ 2<}Qv;2)H��;�Y>k< ���"l���%00/����-�s�C�XXn�Ș�x��.���ּ�Nƌ˖��c��U>+>aLg�yVm�&��t j٬�����%!}|��������!��eՄ{b�ϬX�_�� �5)�V`B#C��C 2���ׯ.��^��1�b�*?`�’ XlG1/�r�yK��=�]"x���r:��0��i"����-H;&����U��)�/Nb�R��b8 8?Ƹ%faF�����n�o�_�ج�@4�8�������e���D ��"��1�1T�L���0<����}�7s��gyb���yJm��D��<�kuE��[��8D"��4 �B��1�5l�����A9�HBX$�>�mʀ%0���A�F��S�0������ >/