Treck TCP/IP Stack (Update A)

Risk Summary

Successful exploitation of this vulnerability may allow remote code execution and a denial-of-service condition.

CVEs (4)

Remediations

• Treck recommends users apply the latest version of the affected products (Treck TCP/IP 6.0.1.68 or later versions). To obtain patches, email [email protected]
• Treck recommends users who cannot apply the latest patches to implement firewall rules to filter out packets that contain a negative content length in the HTTP header.
• For more detailed information on the vulnerabilities and the mitigating controls, please see the Treck advisory.

Affected Vendors

Affected Products (3)

Affected Sectors

Critical Manufacturing, Information Technology, Healthcare and Public Health, Transportation Systems