PT-2020-6617 · Treck · Treck Tcp/Ip Stack

Published 2020-06-16 · Updated 2025-09-30 · CVE-2020-11909

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66

Description The issue is related to insufficient input validation in the implementation of the IPv4 protocol stack. This can allow a remote attacker to gain unauthorized access to protected information. The problem is specifically an IPv4 Integer Underflow.

Recommendations For versions prior to 6.0.1.66, update to version 6.0.1.66 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPv4 protocol stack until a patch is available.

Exploit

Fix

Integer Underflow

RCE

Weakness Enumeration

CWE-191

CWE-20

Related Identifiers

BDU:2022-01531

CVE-2020-11909

Affected Products

Treck Tcp/Ip Stack

References · 16

• 🔥 https://jsof-tech.com/ripple20 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11909 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11909 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01531 · Security Note
• https://treck.com · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC · Vendor Advisory
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us · Note
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us · Note
• https://kb.cert.org/vuls/id/257161 · Note
• https://t.me/cveNotify/136945 · Telegram Post
• https://security.netapp.com/advisory/ntap-20200625-0006 · Note
• https://t.me/cvenotify/4434 · Telegram Post
• http://arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt · Note
• https://support.hp.com/us-en/document/c06640149 · Note
• https://dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities · Note