CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-06-17
Treck TCP/IP Stack IPv6 Out-of-bounds Read Vulnerability (CVE-2020-11899, Ripple20)
[Affected Scope] IoT, medical devices, industrial control systems, and network equipment utilizing Treck TCP/IP embedded protocol stack versions prior to 6.0.1.66
[Impact] An adjacent attacker can send specially crafted IPv6 packets to trigger an out-of-bounds read, leading to information disclosure or system crash/denial of service (DoS)
[Mitigation] Apply the latest firmware updates provided by your device vendors (incorporating Treck 6.0.1.66 or higher) and restrict unnecessary IPv6 traffic at the network boundary