Vulnerabilities > Treck > TCP IP > 6.0.1.66

DATE CVE VULNERABILITY TITLE RISK
2020-12-22 CVE-2020-25066 Out-of-bounds Write vulnerability in Treck Tcp/Ip
A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.
network
low complexity
treck CWE-787
critical
9.8
2020-06-02 CVE-2020-10136 Authentication Bypass by Spoofing vulnerability in multiple products
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
network
low complexity
cisco digi hp treck CWE-290
5.3