Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: V5.3.0.8 (open), V5.4.0.7 (open), V5.5.0.4, V5.5.2.0 (open)
-
Labels:None
-
Account:SPC TCP_IP (SPCTCPIP)
Description
Implementation accepts ARP Response frames and adds corresponding entry to ARP cache even if no ARP Request was sent.
A counter measure shall be taken to prevent this easy way for ARP spoofing attacks as follows. The IP stack shall only consider ARP responses for pending ARP requests.
Attachments
Issue Links
- relates to
-
PSPNSV4-1676
update integrated IP stack to LWIP V5.5.0.4
-
- Resolved
-
-
PSPNSV5-914
update integrated IP stack to LWIP V5.5.0.4
-
- Resolved
-