Back to feed
EUVD-2020-4237 · Published Jun 17, 2020
The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.
Technologies
Treck Tcp\/Ip
Weaknesses
CWE-415
CVSS scores
- v3.18.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - v2.06.4
AV:N/AC:L/Au:N/C:N/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://www.jsof-tech.com/ripple20/
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt
- https://jsof-tech.com/vulnerability-disclosure-policy/
- https://security.netapp.com/advisory/ntap-20200625-0006/
- https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC
Potentially impacted assets
See if this affects your attack surface
