CVE-2020-27336

CVE-2020-27336 is an out-of-bounds read vulnerability affecting Treck IPv6 versions prior to 6.0.1.68. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted packet, leading to a read of up to three bytes outside of allocated memory due to improper input validation. This vulnerability has a CVSS score of 5.3 (Medium), indicating a low impact on confidentiality and no impact on integrity or availability, with low attack complexity and no user interaction required. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion and media coverage, including a CISA advisory.