CVE-2020-11901: Critical severity treck tcp/ip vulnerability
Published Jun 17, 2020
·Updated
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
Affected Software
1 affected component
Treck Tcp\/ip<6.0.1.66
Event History
Jun 17, 2020
CVE Published
via MITRE·10:34 AM
Data Sourced
via MITRE·10:34 AM
Description
Frequently Asked Questions
1
What is CVE-2020-11901?
CVE-2020-11901 is a vulnerability in the Treck TCP/IP stack that allows remote code execution through a single invalid DNS response.
2
How severe is CVE-2020-11901?
CVE-2020-11901 is classified as critical with a severity score of 9.
3
How does CVE-2020-11901 impact Treck TCP/IP stack?
CVE-2020-11901 allows remote attackers to execute arbitrary code by sending a single invalid DNS response to the Treck TCP/IP stack.
4
What software versions are affected by CVE-2020-11901?
Versions of the Treck TCP/IP stack up to and including 6.0.1.66 are affected by CVE-2020-11901.
5
How can I fix CVE-2020-11901?
To fix CVE-2020-11901, users should update to Treck TCP/IP stack version 6.0.1.67 or later.