CVE-2020-11068

HIGH 8.8CVE-2020-11068 · Published 23/06/2020 · updated 17/06/2026

In short

CVE-2020-11068 is a HIGH (CVSS 8.8) vulnerability affecting loramac-node (semtech).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.4% of all vulnerabilities.
Fix: update to 4.4.4 or later.

Package	Affected versions	Patched versions
loramac-node semtech	`< 4.4.4`	`4.4.4`

In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.