PT-2020-6644 · Treck+1 · Treck Tcp/Ip Stack+1

Published

2020-06-16

·

Updated

2021-07-21

·

CVE-2020-11911

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66
Description The issue is related to the improper assignment of permissions for files in the implementation of the ICMPv4 protocol in the Treck TCP/IP stack. This can allow a remote attacker to impact the integrity of protected information. The problem is associated with improper access control for ICMPv4.
Recommendations For versions prior to 6.0.1.66, update to version 6.0.1.66 or later to resolve the issue. As a temporary workaround, consider restricting access to the ICMPv4 protocol to minimize the risk of exploitation.

Exploit

Fix

Incorrect Permission

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-732CWE-20

Related Identifiers

BDU:2022-02192
CVE-2020-11911

Affected Products

Hpe Ilo
Treck Tcp/Ip Stack