VDB
ICSA-20-168-01
ICSA-20-168-01
PUBLISHED
CVSS 3.0999999046325684 LOW
Successful exploitation of these vulnerabilities may allow remote code execution or exposure of sensitive information.
Risk Scores
CVSS 3.1
3.0999999046325684
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Treck Inc. Treck Inc TCP/IP: IPv4 | ||
| Treck Inc. Treck Inc TCP/IP: DNS | ||
| Treck Inc. Treck Inc TCP/IP: ICMPv4 | ||
| Treck Inc. Treck Inc TCP/IP: UDP | ||
| Treck Inc. Treck Inc TCP/IP: ARP | ||
| Treck Inc. Treck Inc TCP/IP: IPv6 | ||
| Treck Inc. Treck Inc TCP/IP: DHCP | ||
| Treck Inc. Treck Inc TCP/IP: TCP |
Timeline
- Jun 16, 2020 CVE Published
- Sep 19, 2024 CVE Updated
References
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-168-01.json advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-20-168-01 advisory
- https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01 url
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices url
- https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf url
- https://www.cisa.gov/topics/industrial-control-systems url
- https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf url
- https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B url
- https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf url
- https://www.cisa.gov/uscert/ncas/tips/ST04-014 url
- mailto:security@treck.com fix
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1508.html fix
- https://search.abb.com/library/Download.aspx?DocumentID=1MRS494936A&LanguageCode=en&DocumentPartId=&Action=Launch fix
- https://www.bbraunusa.com/en/products-and-therapies/customer-communications.html fix
- https://www.baxter.com/product-security#additionalresources fix
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletins/third-party-product-security-bulletin-for-treck-tcp-ip-stack-vulnerabilities fix
- https://www.carestream.com/en/us/services-and-support/cybersecurity-and-privacy fix
- https://www.cat.com/en_US/support/technology/connected-solutions-principles/security/caterpillar-cybersecurity-advisory.html fix
- https://www.digi.com/support/knowledge-base/digi-international-security-notice-treck-tcp-ip-st fix
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-security-bulletin-treck-tcp-ip-stack-vulnerabilities-ripple20.pdf fix
…and 9 more