CVE-2020-6996

9.8 criticalEPSS 1.3%

Critical (9.8) in trianglemicroworks dnp3 source code library. EPSS 1.3% chance of exploitation in the next 30 days.

Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted message may cause a stack-based buffer overflow. Authentication is not required to exploit this vulnerability.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-121
Published: 2020-04-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trianglemicroworks:dnp3_source_code_library

References

https://www.us-cert.gov/ics/advisories/icsa-20-105-02
https://www.us-cert.gov/ics/advisories/icsa-20-105-02

Check your stack JSON