CVE-2020-11907

Vulnerability

The vulnerability is a length parameter inconsistency in TCP handling within the Treck IP stack versions before 6.0.1.66 [1]. This is one of the Ripple20 vulnerabilities affecting embedded systems that use the Treck stack [1]. The bug can be triggered by specially crafted network packets.

Exploitation

An unauthenticated remote attacker can send a malformed TCP packet that exploits the length inconsistency [1]. No authentication or user interaction is required; the attacker only needs network access to the target device.

Impact

Successful exploitation could lead to denial of service, information disclosure, or arbitrary code execution [1]. The exact impact depends on the device's configuration and how the stack is integrated [1]. Cisco and Dell have identified affected products [3][4].

Mitigation

Update to Treck IP stack version 6.0.1.67 or later [1]. Downstream users should contact their device vendor for patches [1]. Cisco has released fixes for affected products [4]. Dell has released updates for client platforms [3]. Network-level filtering of anomalous IP traffic can provide partial mitigation [1].