CVE-2020-25066

Name of the Vulnerable Software and Affected Versions Treck HTTP Server versions prior to 6.0.1.68

Description A heap-based buffer overflow in the Treck HTTP Server component allows remote attackers to cause a denial of service or to possibly execute arbitrary code. The vulnerability is related to insufficient input validation when processing a packet.

Recommendations For versions prior to 6.0.1.68, update to version 6.0.1.68 or later to resolve the issue. As a temporary workaround, consider restricting access to the Treck HTTP Server component to minimize the risk of exploitation.