Paper/Archive/CVE-2020-25066

CVE-2020-25066

mitre — A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (cra…

EPSS 3%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 89.1.891 × 2017.8 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

mitre (CNA)10.0CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftreck.com/vulnerability-response-information refsecurity.netapp.com/advisory/ntap-20210201-0003