Treck vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Treck products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

7.1CVE-2020-27338treckipv6
EPSS score
0.81%
An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access.7.5CVE-2020-27337treckipv6
EPSS score
1.48%
An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthenticated remote attacker to cause an Out of Bounds Write, and possibly a Denial of Service via network access.5.3CVE-2020-27336treckipv6
EPSS score
1.73%
An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-bounds read of up to three bytes via network access.5.3CVE-2020-10136cisconx-os+6
EPSS score
28.54%
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.