[En-Nut-Discussion] Nut/OS TCP/IP Security Issue

[Mingshu Wang]

We have a product developed with Nut/OS 4.8.7 long time ago. We got a customer complaint recently about the TCP/IP stack security issue.


Below is the message from the customer.



Here is the CVE numbers that the alert fell under:

CVE-2020-11896/CVE-2020-11898

The vulnerability scanner used was Tenable.SC.


Did anyone see this issue before? Will the new Nut/OS take care of this problem?


Thanks,

Mingshu