Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21

Export CSV
CVE-2020-10136

IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

CVSS 3.1 · 5.3 Medium EPSS 28.5% KEV · Not listed
Vendors
Cisco Digi Hp and 1 more
Products
Nexus 1000v Nexus 1000ve Nexus 3016 and 60 more
CVE-2020-11910

The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

CVSS 3.1 · 9.8 Critical EPSS 10.9% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11909

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.

CVSS 3.1 · 9.1 Critical EPSS 3.6% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11904

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.

CVSS 3.1 · 7.3 High EPSS 3.2% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-25066

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.

CVSS 3.1 · 10 Critical EPSS 3.5% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11914

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

CVSS 3.1 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11913

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

CVSS 3.1 · 5.3 Medium EPSS 3.3% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11912

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

CVSS 3.1 · 5.3 Medium EPSS 4.5% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11911

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

CVSS 3.1 · 5.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

CVSS 3.1 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11907

The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

CVSS 3.1 · 6.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11906

The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.

CVSS 3.1 · 6.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11905

The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11903

The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11902

The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

CVSS 3.1 · 7.3 High EPSS 9.3% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11901

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

CVSS 3.1 · 9.0 Critical EPSS 21.6% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

CVSS 3.1 · 8.2 High EPSS 13.2% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11898

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.

CVSS 3.1 · 9.1 Critical EPSS 19.2% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11897

The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.

CVSS 3.1 · 10.0 Critical EPSS 9.4% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip