Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.1
CVSSv3

CVE-2020-11898

Published: 17/06/2020 Updated: 21/07/2021
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Subscribe to Treck

Vulnerability Summary

The Treck TCP/IP stack prior to 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote malicious users to trigger an information leak.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

treck tcp\\/ip

Vendor Advisories

Cisco: Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020
A set of previously unknown vulnerabilities on the Treck IP stack implementation were disclosed on June 16, 2020 The vulnerabilities are collectively known as Ripple20 Exploitation of these vulnerabilities could result in remote code execution, denial of service (DoS), or information disclosure, depending on the specific vulnerability This advis ...
HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03666 rev. 3 - Certain HP and Samsung-branded Print Products - Network Stack Potential Vulnerabilities
Multiple potential vulnerabilities may exist in the Treck Inc networking stack used in certain HP and Samsung-branded printers These may include, but not be limited to, denial of service or remote code execution Please refer to Treck Inc CVE’s below for further descriptions ...
HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03666 rev. 3 - Certain HP and Samsung-branded Print Products - Network Stack Potential Vulnerabilities
Multiple potential vulnerabilities may exist in the Treck Inc networking stack used in certain HP and Samsung-branded printers These may include, but not be limited to, denial of service or remote code execution Please refer to Treck Inc CVE’s below for further descriptions ...

ICS Advisories

Treck TCP/IP Stack (Update H)
Critical Infrastructure Sectors: Energy, Critical Manufacturing, Information Technology, Healthcare and Public Health, Transportation Systems

Github Repositories

https://github.com/fang0654/ripple_poc

Just a simple ripple20 PoC for Treck TCP/IP stacks

ripple_poc Just a simple ripple20 PoC for Treck TCP/IP stacks, based on the research from: wwwjsof-techcom/disclosures/ripple20/ and useful python code from: blognvisoeu/2020/07/16/testing-ripple20-a-closer-look-and-proof-of-concept-script-for-cve-2020-11898/ This script is just to get a heartbleed-esque information disclosure via ICMP Only requirement is s

Recent Articles

Psst.. You may want to patch this under-attack data-leaking Cisco bug – and these Ripple20 hijack flaws
The Register • Shaun Nichols in San Francisco • 25 Jul 2020

Plus: US govt sounds the alarm on industrial equipment attacks

In Brief Cisco this week emitted fixes for potentially serious vulnerabilities, one of which is already being exploited in the wild. The under-attack bug is CVE-2020-3452, a path-traversal flaw in Switchzilla's Adaptive Security Appliance and Firepower Threat Defense software that can be used to "read sensitive files on a targeted system." While there was no publicly available exploit code for the high-severity bug when first publicized, a day after issuing its advisory, Cisco said the flaw was ...

Read more...

References

CWE-119https://www.treck.comhttps://jsof-tech.com/vulnerability-disclosure-policy/https://www.jsof-tech.com/ripple20/https://www.kb.cert.org/vuls/id/257161/https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyChttp://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txthttps://security.netapp.com/advisory/ntap-20200625-0006/https://www.kb.cert.org/vuls/id/257161https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_ushttps://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilitieshttps://nvd.nist.govhttps://github.com/fang0654/ripple_pochttps://www.theregister.co.uk/2020/07/25/cisco_bugs_in_brief/https://www.cisa.gov/uscert/ics/advisories/icsa-20-168-01https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook