Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3569

Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it consume available memory and eventually crash. The memory consumption may negatively impact other processes that are running on the device. These vulnerabilities are due to the incorrect handling of IGMP packets. An attacker could exploit these vulnerabilities by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to immediately crash the IGMP process or cause memory exhaustion, resulting in other processes becoming unstable. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address these vulnerabilities.

Published

2020-09-23T01:15:15.503

Last Modified

2025-02-24T15:39:08.970

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-400
  • Type: Primary
    CWE-770
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xr 6.1.4 Yes
Operating System cisco ios_xr 6.2.3 Yes
Operating System cisco ios_xr 6.3.3 Yes
Operating System cisco ios_xr 6.4.2 Yes
Operating System cisco ios_xr 6.5.3 Yes
Operating System cisco ios_xr 6.6.2 Yes
Operating System cisco ios_xr 6.6.3 Yes
Operating System cisco ios_xr 7.0.2 Yes
Operating System cisco ios_xr 7.1.2 Yes
Operating System cisco ios_xr 7.1.15 Yes
Hardware cisco asr_9000v - No
Hardware cisco asr_9001 - No
Hardware cisco asr_9006 - No
Hardware cisco asr_9010 - No
Hardware cisco asr_9901 - No
Hardware cisco asr_9903 - No
Hardware cisco asr_9904 - No
Hardware cisco asr_9906 - No
Hardware cisco asr_9910 - No
Hardware cisco asr_9912 - No
Hardware cisco asr_9922 - No
Hardware cisco ncs_5001 - No
Hardware cisco ncs_5002 - No
Hardware cisco ncs_5011 - No
Hardware cisco ncs_520 - No
Hardware cisco ncs_540 - No
Hardware cisco ncs_5501 - No
Hardware cisco ncs_5501 se No
Hardware cisco ncs_5502 - No
Hardware cisco ncs_5502 se No
Hardware cisco ncs_5508 - No
Hardware cisco ncs_5516 - No
Hardware cisco ncs_560 - No
Hardware cisco ncs_6008 - No
Operating System cisco ios_xr < 6.5.2 Yes
Hardware cisco ncs_5001 - No
Hardware cisco ncs_5002 - No
Hardware cisco ncs_5011 - No
Hardware cisco ncs_520 - No
Hardware cisco ncs_540 - No
Hardware cisco ncs_5501 - No
Hardware cisco ncs_5501 se No
Hardware cisco ncs_5502 - No
Hardware cisco ncs_5502 se No
Hardware cisco ncs_5508 - No
Hardware cisco ncs_5516 - No
Hardware cisco ncs_560 - No
Hardware cisco ncs_6008 - No
Operating System cisco ios_xr 6.1.4 Yes
Operating System cisco ios_xr 6.4.2 Yes
Operating System cisco ios_xr 6.4.3 Yes
Hardware cisco crs - No
Hardware cisco crs-1_16-slot_line_card_chassis - No
Hardware cisco crs-1_16-slot_single-shelf_system - No
Hardware cisco crs-1_4-slot_single-shelf_system - No
Hardware cisco crs-1_8-slot_line_card_chassis - No
Hardware cisco crs-1_8-slot_single-shelf_system - No
Hardware cisco crs-1_fabric_card_chassis - No
Hardware cisco crs-1_line_card_chassis_\(dual\) - No
Hardware cisco crs-1_line_card_chassis_\(multi\) - No
Hardware cisco crs-1_multishelf_system - No
Hardware cisco crs-3_16-slot_single-shelf_system - No
Hardware cisco crs-3_4-slot_single-shelf_system - No
Hardware cisco crs-3_8-slot_single-shelf_system - No
Hardware cisco crs-3_multishelf_system - No
Hardware cisco crs-8\/s-b_crs - No
Hardware cisco crs-8\/scrs - No
Hardware cisco crs-x - No
Hardware cisco crs-x_16-slot_single-shelf_system - No
Hardware cisco crs-x_multishelf_system - No
Hardware cisco crs_performance_route_processor - No
References