CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
CVSS
—
Sin CVSS
EPSS
3.7%
p90
KEV
SÍ
3 nov 2021
Exploit Today
77
0-100
Publicado: — · Última mod.: —
3.7%EPSS · 30 días3.7%
2026-09-172026-10-15
Producto
Cisco / IOS XR
Vulnerabilidad
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Añadido a KEV
3 nov 2021
Remediar antes de
3 may 2022
Uso conocido en ransomware
No
Descripción resumida
Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2020-3566
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2020-3118—96.0%
KEV—79Cisco IOS XR Software Discovery Protocol Format String Vulnerability—CVE-2022-20821—96.0%
KEV—79Cisco IOS XR Open Port Vulnerability—CVE-2010-3035—92.9%
KEV—78Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—CVE-2020-3569—88.4%
KEV—77Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability—CVE-2009-2055—88.4%
KEV—77Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—