How severe is CVE-2001-0162?

CVE-2001-0162 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2001-0162 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 15% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-0162?

CVE-2001-0162 affects Microsoft Windows Embedded Compact. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2001-0162?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2001-0162 published?

CVE-2001-0162 was published on 2001-01-01 and last updated on 2026-06-16.

CVE-2001-0162

CVE-2001-0162 is a high-severity vulnerability in Microsoft Windows Embedded Compact with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 15% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 15% (96th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microsoft Windows Embedded Compact
Published: 2001-01-01
Last modified: 2026-06-16

Description

WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

Frequently asked questions

What is CVE-2001-0162?: WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
How severe is CVE-2001-0162?: CVE-2001-0162 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2001-0162 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 15% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-0162?: CVE-2001-0162 affects Microsoft Windows Embedded Compact. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2001-0162?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2001-0162 published?: CVE-2001-0162 was published on 2001-01-01 and last updated on 2026-06-16.

References

http://www.cs.jhu.edu/~seny/pubs/wince802.pdf

Affected products (1)

cpe:2.3:o:microsoft:windows_embedded_compact:3.0.9348:*:*:*:*:*:*:*

More vulnerabilities in Microsoft Windows Embedded Compact

CVE-2006-6908 — Critical (CVSS 10.0): Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and…
CVE-2008-2160 — Critical (CVSS 9.3): Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow…
CVE-2018-0842 — High (CVSS 7.0): Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold,…

All CVEs affecting Microsoft Windows Embedded Compact →