At a glance:
| IR Number | FG-IR-20-104 |
| Date | Jul 30, 2020 |
| Risk | 
|
| Impact | Information disclosure, Execute unauthorized code or commands |
| CVE ID | CVE-2020-11896 to 2020-11914 |
| CVRF | Download |
Refine Search
PSIRT Advisory
Ripple20 - Critical Vulnerabilities in low-level TCP/IP software library developed by Treck
Summary
On June 16, 2020, cybersecurity researchers from JSOF published a set of 19 vulnerabilities, dubbed Ripple20 that are impacting the TCP/IP stack developed by Treck. A remote attacker can exploit some of these vulnerabilities to take control of an affected system.
Impact
Information disclosure, Execute unauthorized code or commands
Affected Products
Fortinet products do not use the low-level TCP/IP software library developed by Treck, Inc and are therefore not impacted by these vulnerabilities.