PT-2020-6645 · Treck+1 · Treck Tcp/Ip Stack+1

Published

2020-06-16

·

Updated

2021-03-24

·

CVE-2020-11914

CVSS v3.1

4.3

Medium

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66
Description The issue is related to an ARP out-of-bounds read in the Treck TCP/IP stack. It is associated with insufficient input validation in the implementation of the Address Resolution Protocol (ARP), which can be exploited to gain unauthorized access to protected information.
Recommendations For versions prior to 6.0.1.66, update to version 6.0.1.66 or later to resolve the issue. As a temporary workaround, consider restricting access to the ARP protocol to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125CWE-20

Related Identifiers

BDU:2022-02193
CVE-2020-11914

Affected Products

Hpe Ilo
Treck Tcp/Ip Stack