Exploit / PoCcritical

Zero-day flaws in widespread TCP/IP library open millions of IoT devices to remote attack

Help Net Securityby @zeljkazorzFeb 11, 2021 · 12:31 UTC (Feb 11, 2021)5 min read1 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2020-11896 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-11896 CVE-2020-11914

Tags: cve-2020-11896 cve-2020-11914 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-11896 +1 related CVE CVE-2020-11914	The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling	10.0 group max	37%	PoC	Jun 17, 2020

From the original article

5 min read at helpnetsecurity.com

19 vulnerabilities – some of them allowing remote code execution – have been discovered in a TCP/IP stack/library used in hundreds of millions of IoT and OT devices deployed by organizations in a wide variety of industries and sectors.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.