Security Resilience

CVE-2020-11899

Memory Safety in Treck Tcp\/Ip ≤ 6.0.1.66

CISA KEVActive ExploitationEUVD ExploitedPublic PoCMemory Safety
Published
17 June 2020
Modified
07 November 2025
KEV Added
03 March 2022
Patch / advisory
View advisory
CVSS Score v3.1 5.4
Click a component to see what it means
Raw vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
EPSS Score 0.18 97th percentile
Risk Priority 75 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2020-11899 is a medium-severity Out-of-bounds Read (CWE-125) vulnerability in Treck Tcp\/Ip. Its CVSS base score is 5.4 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Data Obfuscation (T1001); ranked in the top 3% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability is an out-of-bounds read (CWE-125) affecting the Treck TCP/IP stack in versions prior to 6.0.1.66. It is triggered during processing of IPv6 traffic and carries a CVSS 3.1 base score of 5.4.

An attacker on an adjacent network can send crafted IPv6 packets without authentication or user interaction. Successful exploitation can modify or disrupt limited system behavior, resulting in integrity and availability impacts while leaving confidentiality unaffected.

Vendor advisories from Cisco, Aruba Networks, and NetApp reference the issue and direct users to updated Treck stack releases or vendor-specific patches that resolve the out-of-bounds condition. No public details on in-the-wild exploitation are provided in the available references.

EU & UK References

Vulnerability Data

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

CWE(s)
CWE-125
KEV Date Added
03 March 2022

Related Threats

MITRE ATT&CK Enterprise Techniques

T1001 Data Obfuscation Command And Control
Adversaries may obfuscate command and control traffic to make it more difficult to detect.
attack.mitre.org →
T1001.002 Steganography Command And Control
Adversaries may use steganographic techniques to hide command and control traffic to make detection efforts more difficult.
attack.mitre.org →
T1003.002 Security Account Manager Credential Access
Adversaries may attempt to extract credential material from the Security Account Manager (SAM) database either through in-memory techniques or through the Windows Registry where the SAM database is stored.
attack.mitre.org →
T1003.003 NTDS Credential Access
Adversaries may attempt to access or create a copy of the Active Directory domain database in order to steal credential information, as well as obtain other information about domain members such as devices, users, and access rights.
attack.mitre.org →
T1003.004 LSA Secrets Credential Access
Adversaries with SYSTEM access to a host may attempt to access Local Security Authority (LSA) secrets, which can contain a variety of different credential materials, such as credentials for service accounts.
attack.mitre.org →
T1003.006 DCSync Credential Access
Adversaries may attempt to access credentials and other sensitive information by abusing a Windows Domain Controller's application programming interface (API)(Citation: Microsoft DRSR Dec 2017) (Citation: Microsoft GetNCCChanges) (Citati…
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-3055Shared CWE-125both on KEV
CVE-2025-24991Shared CWE-125both on KEV
CVE-2022-22674Shared CWE-125both on KEV
CVE-2014-0160Shared CWE-125both on KEV
CVE-2025-22226Shared CWE-125both on KEV
CVE-2023-36424Shared CWE-125both on KEV
CVE-2016-1646Shared CWE-125both on KEV
CVE-2021-25487Shared CWE-125both on KEV
CVE-2023-42916Shared CWE-125both on KEV
CVE-2023-28204Shared CWE-125both on KEV

Affected Assets

treck
tcp\/ip
≤ 6.0.1.66
dell
wyse 5050 all-in-one firmware
all versions
dell
wyse 7030 firmware
all versions
dell
wyse 5030 firmware
all versions

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

ID.RA-01 partial match
blocks

Vulnerability scanning and recording can discover instances of out-of-bounds reads after code is deployed.

PR.PS-02 partial match
blocks

Routine patching replaces vulnerable code containing out-of-bounds read flaws.

PR.PS-06 partial match
blocks

Secure-development practices such as bounds checking and memory-safe languages directly prevent out-of-bounds reads.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.5.14 Information transfer partial match
removes
A.5.15 Access control partial match
removes
A.5.16 Identity management partial match
removes
A.5.17 Authentication information partial match
removes
A.5.18 Access rights partial match
removes
A.8.10 Information deletion partial match
removes

References