CVE-2020-25927: The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read.

Security readout for executives and security teams

A flaw in the DNS handling of InterNiche NicheStack TCP/IP 4.0.1 can let a malformed DNS response crash or disrupt affected devices. The known impact is remote denial of service, not data theft or code execution. Product-level exposure is not listed in the CVE data, so organizations must map embedded and OT devices to vendor guidance. Most likely exposure is embedded or operational technology devices using InterNiche NicheStack TCP/IP 4.0.1 with DNS enabled. The CVE record lists no specific end products, so exposure depends on vendor firmware composition and device network paths to DNS responses. Handle as a resilience risk for embedded and OT environments. It is not currently evidenced as actively exploited, but remote denial of service against operational devices can affect uptime. Prioritize asset identification and vendor confirmation before broad remediation planning. Mitigation focus: Check vendor advisories for devices using NicheStack TCP/IP 4.0.1.; Prioritize firmware updates or vendor-recommended mitigations when available.; Restrict embedded device DNS traffic to trusted resolvers only..

Prepared

Jun 2, 2026, 19:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.