CVE-2020-11901 is a critical remote code execution vulnerability affecting the Treck TCP/IP stack (versions prior to 6.0.1.66), which can be triggered by a single invalid DNS response. With a CVSS score of 9.0, it presents a high-impact threat due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its high EPSS and FAUCET Risk Score, along with significant community discussion and media coverage, indicate considerable attention and concern. Currently, there are no public exploits available in Metasploit, Nuclei, or ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.0.1.66CPE matchmatch criteria | cpe:2.3:a:treck:tcp\/ip:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.4 Reddit, 1.1 Bluesky, 0.8 Mastodon, and 2.3 GitHub mentions.
The average CVE in this peer group has 0.8 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Multiple Vulnerabilities in 5094-AEN2SFPR/XT, 5094-AEN2TR/XT, 5094-AENSFPR/XT, 5094-AENTR/XT
Multiple Vulnerabilities in 5069-AENTR
Multiple Vulnerabilities in 1734-AENT/R
Multiple Vulnerabilities in 1738-AENT/R
Multiple Vulnerabilities in 1732E-16CFGM12R, 1732E-8X8M12DR, 1732E-IB16M12DR, 1732E-IB16M12R, 1732E-OB16M12DR, 1732E-OB16M12R
Multiple Vulnerabilities in 1799ER-IQ10XOQ10
Multiple Vulnerabilities in 1794-AENTR/XT
Multiple Vulnerabilities in 1732E-12X4M12QCDR, 1732E-16CFGM12QCR, 1732E-16CFGM12QCWR, 1732E-12X4M12P5QCDR, 1732E-16CFGM12P5QCR
Multiple Vulnerabilities in 1732E-16CFGM12P5QCWR
Multiple Vulnerabilities in PowerMonitor™ 5000