Back to CVE records
Medium 5.4Known exploited (CISA KEV)Published Jun 17, 2020
CVE-2020-11899The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
Updated under an hour ago ()
Does this affect you?
It affects treck tcp/ip and 3 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Mar 3, 2022; federal agencies had to remediate by Mar 17, 2022. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
- CVSS
- 5.4 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- Weakness (CWE)
- CWE-125
- Known exploited
- Added to CISA KEV Mar 3, 2022; federal remediation due Mar 17, 2022Apply updates per vendor instructions.
- EPSS (exploitation in the next 30 days)
- 18.42% (percentile 97)
- Assigned by
- mitre
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
treck tcp/ip treck:tcp/ip | before 6.0.1.66 | NVD |
dell wyse_5050_all-in-one_firmware dell:wyse_5050_all-in-one_firmware | all versions | NVD |
dell wyse_7030_firmware dell:wyse_7030_firmware | all versions | NVD |
dell wyse_5030_firmware dell:wyse_5030_firmware | all versions | NVD |
References
- https://cwe.mitre.org/data/definitions/125.htmlx-refsource-misc, technical-description
- https://www.kb.cert.org/vuls/id/257161/x-refsource-misc, mitigation, third-party-advisory, us-government-resource
- https://www.treck.comx-refsource-misc, product, vendor-advisory
- https://jsof-tech.com/vulnerability-disclosure-policy/x-refsource-misc, broken-link, third-party-advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlx-refsource-confirm, third-party-advisory
- https://www.kb.cert.org/vuls/id/257161third-party-advisory, x-refsource-cert-vn, us-government-resource
- https://www.jsof-tech.com/ripple20/x-refsource-misc, broken-link, exploit, third-party-advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyCvendor-advisory, x-refsource-cisco, third-party-advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txtx-refsource-confirm, broken-link, third-party-advisory
- https://security.netapp.com/advisory/ntap-20200625-0006/x-refsource-confirm, third-party-advisory
- https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilitiesx-refsource-misc, third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11899us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.