Treck IP stacks contain multiple vulnerabilities

ronjor · Jun 16, 2020

Vulnerability Note VU#257161
Original Release Date: 2020-06-16 | Last Revised: 2020-06-16

Description
Treck IP network stack software is designed for and used in a variety of embedded systems. The software can be licensed and integrated in various ways, including compiled from source, licensed for modification and reuse and finally as a dynamic or static linked library. Treck IP software contains multiple vulnerabilities, most of which are caused by memory management bugs. For more details on the vulnerabilities introduced by these bugs, see Treck's Vulnerability Response Information and JSOF's Ripple20 advisory.
Click to expand...

ronjor · Jun 16, 2020

Ripple20 Vulnerabilities Affecting Treck IP Stacks

Original release date: June 16, 2020
The Cybersecurity and Infrastructure Security Agency (CISA) is aware of multiple vulnerabilities, known as Ripple20, affecting Treck IP stack implementations for embedded systems. A remote attacker can exploit some of these vulnerabilities to take control of an affected system.
CISA encourages users and administrators to review the following products for additional information and mitigations, and update to the latest stable version of Treck IP stack software (6.0.1.67 or later).
CISA’s Advisory ICSA-20-168-01
CERT Coordination Center’s Vulnerability Note VU#257161
Treck’s Vulnerability Response Information
Click to expand...

Log in or Sign up

Treck IP stacks contain multiple vulnerabilities

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Treck IP stacks contain multiple vulnerabilities

ronjor Global Moderator

ronjor Global Moderator

Useful Searches