Critical severity10.0NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2020-25066

Description

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.

Affected products

Treck/Tcp\/ip
cpe:2.3:a:treck:tcp\/ip:*:*:*:*:*:*:*:*
Range: <6.0.1.68
Treck/HTTP Serverdescription
Treck/HTTP Serverllm-create
Range: <6.0.1.68

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20210201-0003/nvdThird Party Advisory
treck.com/vulnerability-response-information/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000