CVE-2020-11901

PoC —

CVSS 3.1

9.0 critical

EPSS

21%p97

Published

Jun 17, 2020 (Jun 17, 2020)

Modified

Jun 17, 2026

Description

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

Vendors: treck
Products: tcp\/ip
Weakness: CWE-125, CWE-131, CWE-330, CWE-787
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (21.1%)

In the news2 stories

New Ripple20 Flaws Put Billions of Internet

The Hacker NewsJun 17, 12:37 UTC · Jun 17, 2020Vulnerability CVE-2020-11896 CVE-2020-11897 CVE-2020-11898+3 CVEs

60

Ripple20 a Major Threat

Infosecurity MagazineSep 10, 18:00 UTC · Sep 10, 2020Vulnerability CVE-2020-11901

47