PT-2020-5603 · Treck+1 · Treck Ipv6+1

Published 2020-12-18 · Updated 2025-09-30 · CVE-2020-27337

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Treck IPv6 versions prior to 6.0.1.68

Description The issue is related to improper input validation in the IPv6 component, allowing an unauthenticated remote attacker to cause an out of bounds write and possibly a denial of service via network access. This can be exploited by a remote attacker to disrupt service.

Recommendations For versions prior to 6.0.1.68, update to version 6.0.1.68 or later to resolve the issue. As a temporary workaround, consider restricting network access to the IPv6 component to minimize the risk of exploitation.

Fix

DoS

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

BDU:2021-01238

CVE-2020-27337

Affected Products

Hpe Ilo

Treck Ipv6

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2020-27337 · Security Note
• https://treck.com/vulnerability-response-information · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01238 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27337 · Vendor Advisory
• https://t.me/cvenotify/7591 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-353-01 · Note
• https://t.me/cveNotify/136947 · Telegram Post
• https://ics-cert.kaspersky.ru/news/2021/02/05/getting-back-on-treck-more-vulnerabilities-in-the-infamous-tcp-ip-stack · Note
• https://t.me/cvenotify/7603 · Telegram Post
• https://t.me/cibsecurity/21195 · Telegram Post
• https://opennet.ru/opennews/art.shtml?num=53170 · Note
• https://se.com/ru/ru/download/document/SEVD-2020-353-01 · Note
• https://securitylab.ru/news/515067.php · Note
• https://t.me/cvenotify/11995 · Telegram Post
• https://security.netapp.com/advisory/ntap-20210201-0003 · Note