Description
A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.
Advisories 2
- SEVD-2020-353-02 Treck HTTP Server Vulnerability on TM3 Bus Coupler Modules (V2.0) Schneider Electric CPCERT · Aug 10, 2021
- ICSA-20-353-01 Treck TCP/IP Stack (Update A) CISA ICS & IT advisories · Jan 26, 2021