Medium 5.4Known exploited (CISA KEV)Published Jun 17, 2020

CVE-2020-11899The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

Updated under an hour ago (Oct 27, 2026, 1:00 AM ET)

Does this affect you?

It affects treck tcp/ip and 3 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Mar 3, 2022; federal agencies had to remediate by Mar 17, 2022. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for treck tcp/ip

Exploited in the last 30 days

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

CVSS: 5.4 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weakness (CWE): CWE-125
Known exploited: Added to CISA KEV Mar 3, 2022; federal remediation due Mar 17, 2022Apply updates per vendor instructions.
EPSS (exploitation in the next 30 days): 18.42% (percentile 97)
Assigned by: mitre
NVD analysis: Analyzed
Record last updated: Oct 21, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

treck tcp/ip treck:tcp/ip	before 6.0.1.66	NVD
dell wyse_5050_all-in-one_firmware dell:wyse_5050_all-in-one_firmware	all versions	NVD
dell wyse_7030_firmware dell:wyse_7030_firmware	all versions	NVD
dell wyse_5030_firmware dell:wyse_5030_firmware	all versions	NVD

References

References

https://cwe.mitre.org/data/definitions/125.html	x-refsource-misc, technical-description
https://www.kb.cert.org/vuls/id/257161/	x-refsource-misc, mitigation, third-party-advisory, us-government-resource
https://www.treck.com	x-refsource-misc, product, vendor-advisory
https://jsof-tech.com/vulnerability-disclosure-policy/	x-refsource-misc, broken-link, third-party-advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html	x-refsource-confirm, third-party-advisory
https://www.kb.cert.org/vuls/id/257161	third-party-advisory, x-refsource-cert-vn, us-government-resource
https://www.jsof-tech.com/ripple20/	x-refsource-misc, broken-link, exploit, third-party-advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC	vendor-advisory, x-refsource-cisco, third-party-advisory
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt	x-refsource-confirm, broken-link, third-party-advisory
https://security.netapp.com/advisory/ntap-20200625-0006/	x-refsource-confirm, third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.