CVE-2020-11912

Vulnerability

CVE-2020-11912 is a TCP out-of-bounds read vulnerability in the Treck TCP/IP stack prior to version 6.0.1.66 [1]. It is one of the Ripple20 vulnerabilities affecting embedded systems using the Treck stack [1]. The bug resides in the TCP handling code and can be triggered by specially crafted network packets.

Exploitation

An unauthenticated remote attacker can send a malformed TCP packet to a device running an affected Treck stack version [1]. No prior authentication or user interaction is required. The attacker only needs network access to the target device.

Impact

Successful exploitation allows an attacker to read out-of-bounds memory, potentially leading to information disclosure of sensitive data [1]. The exact impact depends on the device configuration and memory layout, but could include leakage of cryptographic keys or other confidential information.

Mitigation

Treck released version 6.0.1.67 to address this vulnerability [1]. Users should update to the latest stable version. Downstream users of embedded systems should contact their device vendor for patches [1]. Cisco and Dell have issued advisories for affected products [3][4]. Network-level mitigations such as deep packet inspection may help block malformed packets [1].