CVE Watch—

CVE-2020-3566

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

CVSS

—

No CVSS

EPSS

3.7%

p90

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

3.7%EPSS · 30 days3.7%

2026-09-182026-10-16

KEV catalog record

Product

Cisco / IOS XR

Vulnerability

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-3566

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-3118—

96.0%

KEV—79Cisco IOS XR Software Discovery Protocol Format String Vulnerability—CVE-2022-20821—

96.0%

KEV—79Cisco IOS XR Open Port Vulnerability—CVE-2010-3035—

92.9%

KEV—78Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—CVE-2009-2055—

88.4%

KEV—77Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—CVE-2020-3569—

88.4%

KEV—77Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability—