Vulnerability in N/a
CVE-2020-11899
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
EPSS: 0.353 (97.1th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
CISA KEV (Known Exploited Vulnerabilities)
This CVE is on the CISA KEV catalog, added on . CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.
BOD 22-01 due date: .
Required action: Apply updates per vendor instructions.
Public proof-of-concept exploits
References
- cwe.mitre.org/data/definitions/125.html (x_refsource_MISC)
- www.kb.cert.org/vuls/id/257161/ (x_refsource_MISC)
- www.treck.com (x_refsource_MISC)
- jsof-tech.com/vulnerability-disclosure-policy/ (x_refsource_MISC)
- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html (x_refsource_CONFIRM)
- VU#257161 (third-party-advisory, x_refsource_CERT-VN)
- www.jsof-tech.com/ripple20/ (x_refsource_MISC)
- 20200617 Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 (vendor-advisory, x_refsource_CISCO)
- www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt (x_refsource_CONFIRM)
- security.netapp.com/advisory/ntap-20200625-0006/ (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2020-11899?
- CVE-2020-11899 is a vulnerability in N/a. Published 2020-06-17.
- Is CVE-2020-11899 known to be exploited?
- Yes. CVE-2020-11899 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-03-03), indicating it is being actively exploited. 8 public proof-of-concept repositories are indexed.