Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2020-10136

IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

CVSS 3.1 · 5.3 Medium EPSS 28.5% KEV · Not listed
Vendors
Cisco Digi Hp and 1 more
Products
Nexus 1000v Nexus 1000ve Nexus 3016 and 60 more
CVE-2020-27337

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthenticated remote attacker to cause an Out of Bounds Write, and possibly a Denial of Service via network access.

CVSS 3.1 · 7.3 High EPSS 1.5% KEV · Not listed
Vendors
Treck
Products
Ipv6
CVE-2020-11910

The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

CVSS 3.1 · 9.8 Critical EPSS 10.9% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11909

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.

CVSS 3.1 · 9.1 Critical EPSS 3.6% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-27336

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-bounds read of up to three bytes via network access.

CVSS 3.1 · 3.7 Low EPSS 1.7% KEV · Not listed
Vendors
Treck
Products
Ipv6
CVE-2020-11904

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.

CVSS 3.1 · 7.3 High EPSS 3.2% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-27338

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Treck
Products
Ipv6
CVE-2020-25066

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.

CVSS 3.1 · 10 Critical EPSS 3.5% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11914

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

CVSS 3.1 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11913

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

CVSS 3.1 · 5.3 Medium EPSS 3.3% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11912

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

CVSS 3.1 · 5.3 Medium EPSS 4.5% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11911

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

CVSS 3.1 · 5.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

CVSS 3.1 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11907

The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

CVSS 3.1 · 6.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11906

The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.

CVSS 3.1 · 6.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11905

The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11903

The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11902

The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

CVSS 3.1 · 7.3 High EPSS 9.3% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip
CVE-2020-11901

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

CVSS 3.1 · 9.0 Critical EPSS 21.6% KEV · Not listed
Vendors
Treck
Products
Tcp\/ip