CVE-2020-11909

CVE-2020-11909 concerns Treck’s embedded TCP/IP stack. The Treck IP stack prior to 6.0.1.66 contains an IPv4 integer underflow in IPv4 handling, affecting multiple vendor advisories and CERT guidance related to Ripple20. The CVE is associated with high-impact exposure in some contexts: the CERT/C...

CVE-2020-11908

CVE-2020-11908 affects the Treck TCP/IP stack (embedded) where the DHCP component mishandles null termination. Affected: Treck’s stack prior to 4.7.1.27. Impact per CVE: potential information exposure (CVE-2020-11908 CVSSv3.1 base 4.3, MEDIUM) and related DHCP handling issues. Mitigation: Treck a...

CVE-2020-11907

CVE-2020-11907 concerns the Treck TCP/IP stack before version 6.0.1.66, which allegedly “improperly handles a Length Parameter Inconsistency in TCP.” The initial description lists an Adjacent Network attack vector with Low attack complexity and no authentication, and CVSS scores: CVSS2 base 5.8 (...

CVE-2020-11906

CVE-2020-11906 affects the Treck TCP/IP stack in embedded systems. The vulnerability is an Ethernet Link Layer Integer Underflow in Treck’s IP stack before 6.0.1.66. Affected products use Treck IP stack implementations (embedded systems) and may be exposed via Ethernet link layer processing. The ...

CVE-2020-11905

CVE-2020-11905 involves the Treck TCP/IP stack in DHCPv6 with an Out-of-bounds Read in Treck’s embedded IP stack prior to 6.0.1.66. The vulnerability affects Treck IP stack implementations used in embedded systems; remediation is to upgrade Treck to 6.0.1.67 or later (per CERT/VU guidance and Tre...

CVE-2020-11904

The CVE refers to Treck TCP/IP stack before 6.0.1.66, which has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write (Ripple20 family). Connected documents corroborate multiple Treck vulnerabilities in the Ripple20 set and describe memory-management bugs that can enable...

CVE-2020-11903

CVE-2020-11903 affects the Treck TCP/IP stack's DHCP component (embedded systems) prior to version 6.0.1.28, enabling an Out-of-bounds Read via DHCP packets. Connected advisories confirm impact scope and provide remediation: Treck recommends updating to Treck TCP/IP 6.0.1.67 or later. Expected im...

CVE-2020-11902

The CVE entry CVE-2020-11902 concerns Treck IP stack (embedded) with an IPv6-over-IPv4 tunneling out-of-bounds read vulnerability in the IPv6-over-IPv4 tunneling component. Affected are Treck TCP/IP stack versions before 6.0.1.66. The vulnerability stems from improper handling in the IPv6-over-IP...

CVE-2020-11901

CVE-2020-11901 affects the Treck TCP/IP stack (embedded) where the DNS resolver branch can be triggered by a single invalid DNS response to allow Remote Code Execution. The issue exists in Treck IP stack prior to 6.0.1.66; exploitation is network-based and rated CRITICAL (CVSSv3: AV:N/AC:H/PR:N/U...

CVE-2020-11900

CVE-2020-11900 affects the Treck TCP/IP stack (embedded) prior to 6.0.1.41, where IPv4 tunneling may trigger a double-free in the tunneling path. This can lead to use-after-free conditions, potentially impacting availability (DoS) or stability. Treck recommends upgrading to 6.0.1.67 or later; dow...

CVE-2020-11899

CVE-2020-11899 refers to the Treck TCP/IP stack before 6.0.1.66, which contains an IPv6 out-of-bounds read vulnerability in its IPv6 handling. Related connected sources confirm the affected component is the Treck IP Stack used in embedded systems; the CVE describes an IPv6 OOB read with low to mo...

CVE-2020-11898

CVE-2020-11898 affects the Treck TCP/IP stack. According to the published description and vendor advisories, it is caused by an IPv4/ICMPv4 Length Parameter Inconsistency that may allow a remote attacker to trigger an information leak. The Treck advisory recommends upgrading the Treck IP stack to...

CVE-2020-11897

CVE-2020-11897 is a Ripple20 vulnerability in the Treck TCP/IP IPv6 implementation (Treck IP stack) that allows an out-of-bounds write via malformed IPv6 packets. The initial CVE record notes this vulnerability as part of Treck’s IPv6 handling in versions before 5.0.1.35; Treck and CERT/ICS advis...

CVE-2020-11896

CVE-2020-11896 affects the Treck TCP/IP stack prior to version 6.0.1.66 and enables Remote Code Execution via IPv4 tunneling. The Ripple20 set documents multiple vulnerabilities in this stack; a PoC exploit exists (e.g., Digi Connect ME 9210). Connected advisories (Cisco, Fortinet, F5, others) di...

CVE-2020-14080

Trendnet TEW-827DRU devices up to firmware version 2.06B04 are affected by a stack-based buffer overflow in the ssi binary. An unauthenticated attacker can cause arbitrary code execution by sending a specially crafted POST to apply_sec.cgi with action ping_test and a long ping_ipaddr value. The i...

CVE-2020-10752

CVE-2020-10752 — OpenShift API Server leaks OAuthTokens into logs during panics, enabling an attacker who can trigger an API error to read logs and reuse the leaked token to authenticate. Public details in provided documents confirm the vulnerability and its access/impact but do not include produ...

CVE-2020-13851

CVE-2020-13851 affects Artica Pandora FMS 7.44, enabling remote command execution via the Events feature. The underlying cause is a command-injection vulnerability in Events that could allow unauthenticated attackers to run arbitrary commands, potentially taking control of the Pandora FMS server ...

CVE-2020-11798

CVE-2020-11798 affects Mitel MiCollab AWV’s web conference component. Versions prior to 8.1.2.4 and 9.x prior to 9.1.3 are vulnerable to a Directory Traversal flaw caused by insufficient access validation, allowing an attacker to access arbitrary files in restricted server directories via a craft...

CVE-2020-1316

CVE-2020-1316 is a Windows kernel elevation of privilege vulnerability where the Windows kernel fails to properly handle objects in memory. This can allow a local attacker with low privileges to achieve high integrity/critical impact (confidentiality, integrity, and availability), as indicated by...

CVE-2020-1307

Technical details for CVE-2020-1307 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation if available.