CVE-2020-27336: Treck IPv6

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-bounds read of up to three bytes via network access.

Affected products

• Treck IPv6: before 6.0.1.68 (fixed in 6.0.1.68)

Published 2020-12-22. Last modified 2026-06-17.