Description
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 2 repositories
-
0xkol/ripple20-digi-connect-exploit ★ 10 · Nov 30, 2022
RCE exploit for CVE-2020-11896 (Ripple20 IP-in-IP Heap Overflow Vulnerability) targeting Digi Connect ME 9210
-
Fans0n-Fan/Treck20-Related ★ 10 · Jul 21, 2020
PoC for CVE-2020-11896 Treck TCP/IP stack and device asset investigation
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 8
- VDE-2021-028 Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP sensors with multiple vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-024 Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communication Module XKM3000 L MED CERT@VDE · May 14, 2025
- ICSA-20-168-01 Treck TCP/IP (Update I) CISA ICS & IT advisories · Sep 19, 2024
- ICSA-24-046-03 Siemens SIMATIC RTLS Gateways CISA ICS & IT advisories · Feb 13, 2024
- SSA-647068 SSA-647068: Ripple20 in SIMATIC RTLS Gateways Siemens ProductCERT · Feb 13, 2024
- WID-SEC-2023-0683 Treck TCP/IP-Stack: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 19, 2023
- SEVD-2020-175-01 Treck TCP/IP Vulnerabilities (Ripple20) Schneider Electric CPCERT · Aug 8, 2022
- SEVD-2020-174-01 APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices Schneider Electric CPCERT · Jun 30, 2021
References
- https://www.kb.cert.org/vuls/id/257161/
- https://www.treck.com
- https://jsof-tech.com/vulnerability-disclosure-policy/
- VU#257161 third-party-advisory
- https://www.jsof-tech.com/ripple20/
- 20200617 Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 vendor-advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt
- https://security.netapp.com/advisory/ntap-20200625-0006/
- https://cert-portal.siemens.com/productcert/pdf/ssa-631949.pdf
- https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us
- https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities