CVE-2020-6996: Trianglemicroworks DNP3 Source Code Library

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted message may cause a stack-based buffer overflow. Authentication is not required to exploit this vulnerability.

Affected products

• Trianglemicroworks DNP3 Source Code Library: from 3.16.00, up to and including 3.25.01

Published 2020-04-15. Last modified 2026-06-17.