Description
The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
Ransc0rp1on/Ripple20 ★ 0 · Jun 15, 2026
This comprehensive package contains everything needed to detect, analyze, and remediate Ripple20 (CVE-2020-11898) vulnerabilities in your organization.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 6
- VDE-2021-028 Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP sensors with multiple vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-024 Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communication Module XKM3000 L MED CERT@VDE · May 14, 2025
- ICSA-20-168-01 Treck TCP/IP (Update I) CISA ICS & IT advisories · Sep 19, 2024
- WID-SEC-2023-0683 Treck TCP/IP-Stack: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 19, 2023
- SEVD-2020-175-01 Treck TCP/IP Vulnerabilities (Ripple20) Schneider Electric CPCERT · Aug 8, 2022
- SEVD-2020-174-01 APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices Schneider Electric CPCERT · Jun 30, 2021
References
- https://www.kb.cert.org/vuls/id/257161/
- https://www.treck.com
- https://jsof-tech.com/vulnerability-disclosure-policy/
- VU#257161 third-party-advisory
- https://www.jsof-tech.com/ripple20/
- 20200617 Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 vendor-advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt
- https://security.netapp.com/advisory/ntap-20200625-0006/
- https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us
- https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities