Treck

Records24All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Treck records in CISA KEV

TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records

Tcp/ip 21 records HIGH Ipv6 3 records MEDIUM

Records

21 records in Tcp/ip · all components

TI-2020-09565 CVE-2020-11899 · GHSA-6r3w-c7h6-wfhg

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

HIGH 82KEV

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.1842 Published 2020-06-17 No fix listed CWE-125

TI-2020-09562 CVE-2020-11896 · GHSA-hwgx-cxhm-g3q3

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

HIGH 69

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.36852 Published 2020-06-17 No fix listed CWE-119

TI-2020-09576 CVE-2020-11910 · GHSA-qrg2-552m-g38p

The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

MEDIUM 62

The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10846 Published 2020-06-17 No fix listed CWE-125

TI-2020-09567 CVE-2020-11901 · GHSA-h43v-qw2f-527m

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

MEDIUM 58

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.21607 Published 2020-06-17 No fix listed CWE-125

TI-2020-09564 CVE-2020-11898 · GHSA-8hhv-42hq-p4q9

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter…

MEDIUM 57

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.18874 Published 2020-06-17 No fix listed CWE-119

TI-2020-09563 CVE-2020-11897 · GHSA-95jv-7wgq-5p3q

The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.

MEDIUM 55

The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.09365 Published 2020-06-17 No fix listed CWE-787

TI-2020-09575 CVE-2020-11909 · GHSA-m99q-jrwg-59cj

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.

MEDIUM 53

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03591 Published 2020-06-17 No fix listed CWE-191

TI-2020-09566 CVE-2020-11900 · GHSA-5738-q2rr-3w4x

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

MEDIUM 50

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.1309 Published 2020-06-17 No fix listed CWE-415

TI-2020-15326 CVE-2020-25066 · GHSA-gjv5-9xrv-6pww

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows…

MEDIUM 49

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03493 Published 2020-12-22 No fix listed CWE-787

TI-2020-08191 CVE-2020-10136 · GHSA-8gxc-83hw-9578

IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

MEDIUM 47

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.28537 Published 2020-06-02 No fix listed CWE-290

TI-2020-09570 CVE-2020-11904 · GHSA-3wmc-fg6p-fq4v

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation…

MEDIUM 46

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03171 Published 2020-06-17 No fix listed CWE-190

TI-2020-09568 CVE-2020-11902 · GHSA-gwj4-85g2-26g9

The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

MEDIUM 44

The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.09279 Published 2020-06-17 No fix listed CWE-125

TI-2020-09571 CVE-2020-11905 · GHSA-cpc9-q9p6-8g9x

The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

LOW 33

The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01987 Published 2020-06-17 No fix listed CWE-125

TI-2020-09569 CVE-2020-11903 · GHSA-mv5v-fv4r-rw4v

The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

LOW 33

The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.02075 Published 2020-06-17 No fix listed CWE-125

TI-2020-09573 CVE-2020-11907 · GHSA-8mcc-j8jc-cj5h

The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

LOW 32

The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.0196 Published 2020-06-17 No fix listed

TI-2020-09572 CVE-2020-11906 · GHSA-vm7q-gv9m-xqf3

The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.

LOW 32

The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.0196 Published 2020-06-17 No fix listed CWE-191

TI-2020-09578 CVE-2020-11912 · GHSA-w9wg-858m-29fc

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

LOW 31

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04521 Published 2020-06-17 No fix listed CWE-125

TI-2020-09579 CVE-2020-11913 · GHSA-rgg4-rgq2-h589

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

LOW 30

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03336 Published 2020-06-17 No fix listed CWE-125

TI-2020-09577 CVE-2020-11911 · GHSA-xwf2-93hx-88xm

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

LOW 30

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03149 Published 2020-06-17 No fix listed CWE-732

TI-2020-09574 CVE-2020-11908 · GHSA-xg49-wcx3-x7r3

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

LOW 24

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.01899 Published 2020-06-17 No fix listed

TI-2020-09580 CVE-2020-11914 · GHSA-7rj5-xw53-7j3v

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

LOW 23

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.01657 Published 2020-06-17 No fix listed CWE-125

Open these records in search →

Critical	7
High	5
Medium	12
Low	0
No CVSS	0