Description
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
Advisories 6
- VDE-2021-028 Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP sensors with multiple vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-024 Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communication Module XKM3000 L MED CERT@VDE · May 14, 2025
- ICSA-20-168-01 Treck TCP/IP (Update I) CISA ICS & IT advisories · Sep 19, 2024
- WID-SEC-2023-0683 Treck TCP/IP-Stack: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 19, 2023
- SEVD-2020-175-01 Treck TCP/IP Vulnerabilities (Ripple20) Schneider Electric CPCERT · Aug 8, 2022
- SEVD-2020-174-01 APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices Schneider Electric CPCERT · Jun 30, 2021
References
- https://www.kb.cert.org/vuls/id/257161/
- https://www.treck.com
- https://jsof-tech.com/vulnerability-disclosure-policy/
- VU#257161 third-party-advisory
- https://www.jsof-tech.com/ripple20/
- 20200617 Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 vendor-advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt
- https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities