Skip to content
Noroxi

treck records

24 published records for vendor treck.

Researcher profile

Entered KEV
1 · 4.2%
Weaponized
1 · 4.2%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
624 days

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2020-11899
    57Plan

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

    MediumCVSS 5.4KEVWeaponizedEPSS 19%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11896
    51Plan

    The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

    CriticalCVSS 10.0Proof of conceptEPSS 37%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11897
    43Plan

    The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.

    CriticalCVSS 10.0No exploitEPSS 9%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11901
    42Plan

    The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

    CriticalCVSS 9.0No exploitEPSS 21%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11898
    42Plan

    The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers

    CriticalCVSS 9.1Proof of conceptEPSS 19%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-25066
    40Plan

    A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/

    CriticalCVSS 9.8No exploitEPSS 3%

    treck · tcp\/ipDec 22, 2020

  • CVE-2020-11900
    36Monitor

    The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

    HighCVSS 8.2No exploitEPSS 13%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11902
    32Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

    HighCVSS 7.3No exploitEPSS 9%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-10136
    30Monitor

    IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

    MediumCVSS 5.3Proof of conceptEPSS 29%

    cisco · nx-osJun 2, 2020

  • CVE-2020-11904
    30Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.

    HighCVSS 7.3No exploitEPSS 3%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-27337
    29Monitor

    An issue was discovered in Treck IPv6 before 6.0.1.68.

    HighCVSS 7.3No exploitEPSS 1%

    treck · ipv6Dec 22, 2020

  • CVE-2020-27338
    28Monitor

    An issue was discovered in Treck IPv6 before 6.0.1.68.

    HighCVSS 7.1No exploitEPSS 1%

    treck · ipv6Dec 22, 2020

  • CVE-2020-11903
    27Monitor

    The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

    MediumCVSS 6.5No exploitEPSS 2%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11905
    27Monitor

    The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

    MediumCVSS 6.5No exploitEPSS 2%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11907
    26Monitor

    The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

    MediumCVSS 6.3No exploitEPSS 2%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11906
    26Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.

    MediumCVSS 6.3No exploitEPSS 2%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11910
    24Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

    MediumCVSS 5.3No exploitEPSS 11%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11912
    22Monitor

    The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

    MediumCVSS 5.3No exploitEPSS 5%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11909
    22Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.

    MediumCVSS 5.3No exploitEPSS 4%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11913
    22Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

    MediumCVSS 5.3No exploitEPSS 3%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11911
    22Monitor

    The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

    MediumCVSS 5.3No exploitEPSS 3%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-27336
    22Monitor

    An issue was discovered in Treck IPv6 before 6.0.1.68.

    MediumCVSS 5.3No exploitEPSS 2%

    treck · ipv6Dec 22, 2020

  • CVE-2020-11908
    18Monitor

    The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

    MediumCVSS 4.3No exploitEPSS 2%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11914
    17Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

    MediumCVSS 4.3No exploitEPSS 2%

    treck · tcp\/ipJun 17, 2020