Vendor / Project: Cisco Product: IOS XR Description: Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash. Required Action: Apply updates per vendor instructions. Due Date: 2022-05-03 Ransomware Campaign Use: Unknown CWEs: CWE-400 Notes: https://nvd.nist.gov/vuln/detail/CVE-2020-3569
CVE-2020-3569 — Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2021-11-03 00:00 UTC
- Importiert: 2026-10-21 18:47 UTC
- CVSS: 8.6
- Quelle-ID:
cisa_kev - uid_hash:
4ae2c6681f9284e3285583a4c851009987641eeec464e684d48def664a8b2619
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.6 |
HIGH |
8.6 |
2020-09-23 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |