False Alarms and Close Calls: the Analysis and Verification of Ripple20 and Its Ripple Effects

EXECUTIVE SUMMARY

Ripple20 is a collection of 19 CVEs disclosed by JSOF that affect the Treck TCP/IP stack. It has proven to be one of the most widespread vulnerabilities and is elusive to traditional detection techniques due to the many variants spread out over many years of releases. According to JSOF, this series of vulnerabilities affects hundreds of millions of devices and includes multiple remote execution code vulnerabilities, which would allow an attacker to gain complete control over a target device remotely.
Given the serious nature of the vulnerabilities and how they would affect our industry partners, Finite State chose to look into CVE-2020-11896, and CVE2020-11901, which were the two primary Remote Code Execution (RCE) vulnerabilities presented in the disclosure. They also have the highest CVSS scores of the series. CVSS uses exploitability, scope, and impact metrics to calculate a score between 0 and 10. The scores for the two RCE vulnerabilities were ranked as Critical impact with scores of 10.0 and 9.0 respectively.

First Name

Last Name

Job Title

In which industry do you work?

Company Name

Address

City

State

Postal Code

Country

Phone

How many people are employed by your entire organization?

Company Revenue

I consent to have this website store my submitted information so they can respond to my inquiry. See your Privacy Policy to learn more about how we use data.