Where
-Infinity
0

Trending

Last week
Last month
Last year

Cisco NX-OSIP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

Risk 28
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

1 / 2
Source: MITRE

Remedy

Customers should apply the latest patch provided by the affected vendor that addresses this issue and prevents unspecified IP-in-IP packets from being processed. Devices manufacturers are urged to disable IP-in-IP in their default configuration and require their customers to explicitly configure IP-in-IP as and when needed.
First published (updated )
CVE-2020-10136

Treck IPv6Input Validation

Risk 52
Severity
7.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthenticated remote attacker to cause an Out of Bounds Write, and possibly a Denial of Service via network access.

First published (updated )
CVE-2020-27337

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

First published (updated )
CVE-2020-11910

Treck Tcp\/ipInteger Underflow

Risk 66
Severity
9.1
Integer Underflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.

First published (updated )
CVE-2020-11909

Treck IPv6Input Validation

Risk 27
Severity
5.3
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-bounds read of up to three bytes via network access.

First published (updated )
CVE-2020-27336

Treck Tcp\/ipInteger Overflow

Risk 52
Severity
7.5
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.

First published (updated )
CVE-2020-11904

Treck IPv6Input Validation

Risk 48
Severity
7.1
Input Validation
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access.

First published (updated )
CVE-2020-27338

Treck Tcp\/ipBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.

First published (updated )
CVE-2020-25066

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

Risk 52
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

First published (updated )
CVE-2020-11902

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS respons…

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

First published (updated )
CVE-2020-11901

Treck Tcp\/ipDouble Free

Risk 54
Severity
8.2
Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

First published (updated )
CVE-2020-11900

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

Risk 38
Severity
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

First published (updated )
CVE-2020-11903

Treck Tcp\/ipBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

First published (updated )
CVE-2020-11896

Treck Tcp\/ipThe Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

Risk 22
Severity
4.3
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

First published (updated )
CVE-2020-11908

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

Risk 46
Severity
6.3
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

First published (updated )
CVE-2020-11907

Treck Tcp\/ipThe Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packet…

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.

First published (updated )
CVE-2020-11897

Treck Tcp\/ipBuffer Overflow

Risk 66
Severity
9.1
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.

First published (updated )
CVE-2020-11898

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

Risk 38
Severity
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

First published (updated )
CVE-2020-11905

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

First published (updated )
CVE-2020-11911

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

Risk 22
Severity
4.3
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

First published (updated )
CVE-2020-11914

Treck Tcp\/ipInteger Underflow

Risk 46
Severity
6.3
Integer Underflow
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.

First published (updated )
CVE-2020-11906

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

First published (updated )
CVE-2020-11913

Treck Tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

First published (updated )
CVE-2020-11912

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203