cve.bz

CVE-2020-27338

7.1 highEPSS 0.8%

High (7.1) in treck ipv6. EPSS 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access.

Severity

CVSS 3.1

7.1 high
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS
0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWEs
CWE-20, CWE-125
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON