CVE-2020-11897 is a critical out-of-bounds write vulnerability affecting the Treck TCP/IP stack, specifically versions prior to 5.0.1.35. This flaw can be triggered by multiple malformed IPv6 packets, allowing an unauthenticated attacker to achieve complete compromise of confidentiality, integrity, and availability of affected devices. While it has a CVSS score of 10.0, indicating maximum severity and ease of exploitation, there is currently no public exploit code available, nor is it listed on the CISA KEV catalog. Despite the lack of active exploitation, the vulnerability has garnered significant community attention and media coverage, highlighting its potential impact on IoT devices across various industries.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.0.1.35CPE matchmatch criteria | cpe:2.3:a:treck:tcp\/ip:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.