SECURITY ADVISORIES
Security Advisories
CVE-2020-17437
The vulnerability, which is a part of the vulnerabilities commonly referred to as AMNIESA:33, affects the network stack such that an attacker could set up an invalid data pointer for TCP packet data, by setting the urgent flag and manipulating the value of the urgent pointerto a value beyond the size of the packet itself.
Affected products: XT-1, XT Mini
Status: Fixed in firmware version 1.6.8