{"id":2751,"date":"2020-06-22T11:05:14","date_gmt":"2020-06-22T09:05:14","guid":{"rendered":"https:\/\/xopero.com\/blog\/?p=2751"},"modified":"2023-08-16T14:44:55","modified_gmt":"2023-08-16T12:44:55","slug":"ripple20-affects-hundreds-of-millions-of-devices","status":"publish","type":"post","link":"https:\/\/xopero.com\/blog\/en\/ripple20-affects-hundreds-of-millions-of-devices\/","title":{"rendered":"Ripple20 affects hundreds of millions of devices"},"content":{"rendered":"\n

Welcome to the next episode of the Xopero Security Center<\/a>! This time we are sharing security news about the Ripple20 vulnerability set, which affects a widely used low-level TCP\/IP library. Researchers discovered 19 dangerous 0-day (sic!). Unfortunately, there is no easy solution. At last for now… <\/p>\n\n\n\n

<\/div>\n\n\n\n\n\n\n\n<\/a>\n\n\n

The Ripple20 effect – 19 zero-days impacts everything from printers to infusion pumps<\/strong><\/h2>\n\n\n

Ripple20 is a set of 19 vulnerabilities which resides in a low-level TCP\/IP software library developed by Treck, It could be weaponized and used by remote attackers to gain complete control over targeted devices without requiring any user interaction.<\/p>\n\n\n

Ripple20<\/strong> – 19 vulnerabilities which score between 3.1 and over 9 CVSS<\/h6>\n\n\n

There are four critical vulnerabilities in Treck TCP\/IP stack, with CVSS scores over 9, which could let attackers execute arbitrary code on targeted devices remotely, and one critical bug affects the DNS protocol. The other 15 vulnerabilities are in ranging degrees of severity with CVSS score ranging from 3.1 to 8.2, and effects ranging from Denial of Service to potential Remote Code Execution.<\/p>\n\n\n\n

\n