Multiple vulnerabilities in Treck TCP/IP



Risk High
Patch available YES
Number of vulnerabilities 4
CVE-ID CVE-2020-25066
CVE-2020-27337
CVE-2020-27338
CVE-2020-27336
CWE-ID CWE-122
CWE-787
CWE-125
Exploitation vector Network
Public exploit N/A
Vulnerable software
 TCP/IP stack
Other software / Other software solutions

Vendor Treck

Security Bulletin

This security bulletin contains information about 4 vulnerabilities.

1) Heap-based buffer overflow

EUVDB-ID: #VU49124

Risk: High

CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-25066

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Treck HTTP Server component. A remote attacker can pass specially crafted request to the server, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

TCP/IP stack: 6.0.1.66 - 6.0.1.67

CPE2.3 External links

http://treck.com/vulnerability-response-information/
http://ics-cert.us-cert.gov/advisories/icsa-20-353-01


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds write

EUVDB-ID: #VU49125

Risk: High

CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-27337

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a DoS attack or compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input within Treck IPv6 component. A remote attacker can send specially crafted packets to the system, trigger out-of-bounds write and crash the system or potentially execute arbitrary code.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

TCP/IP stack: 6.0.1.66 - 6.0.1.67

CPE2.3 External links

http://treck.com/vulnerability-response-information/
http://ics-cert.us-cert.gov/advisories/icsa-20-353-01


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU49126

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-27338

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition within the DHCPv6 client component in Treck TCP/IP. A remote attacker can send specially crafted packets to the system, trigger an out-of-bounds read and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

TCP/IP stack: 6.0.1.66 - 6.0.1.67

CPE2.3 External links

http://treck.com/vulnerability-response-information/
http://ics-cert.us-cert.gov/advisories/icsa-20-353-01


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Out-of-bounds read

EUVDB-ID: #VU49127

Risk: Medium

CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-27336

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service attack..

The vulnerability exists due to a boundary condition within the IPv6 component in Treck TCP/IP. A remote attacker can send specially crafted packets to the system, trigger out-of-bounds read error and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

TCP/IP stack: 6.0.1.66 - 6.0.1.67

CPE2.3 External links

http://treck.com/vulnerability-response-information/
http://ics-cert.us-cert.gov/advisories/icsa-20-353-01


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###