Every CVE Search/ Get API key

CVE-2020-11901

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS...

9.0 Critical

CVE-2020-11901 is a critical vulnerability (CVSS 9.0) in Treck Tcp\/ip, published June 17, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 21.6%, the 97th percentile. No source names a fixed version.

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

21.6%Up 17.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.0

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

Record
CVE-2020-11901
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-125, CWE-131, CWE-330, CWE-787
Updated
2026-11-02
CVE List No score

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

Record
CVE-2020-11901
Updated
2026-11-02
EUVDEUVD-2020-4238 No score

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

Record
EUVD-2020-4238
Updated
2026-11-03
GitHub AdvisoriesGHSA-h43v-qw2f-527m No score

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS...

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

Record
GHSA-h43v-qw2f-527m
Weakness
CWE-20
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open