CVE Watch—

CVE-2020-3566

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

CVSS

—

Sem CVSS

EPSS

3.7%

p90

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

3.7%EPSS · 30 dias3.7%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Cisco / IOS XR

Vulnerabilidade

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-3566

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2020-3118—

96.1%

KEV—79Cisco IOS XR Software Discovery Protocol Format String Vulnerability—CVE-2022-20821—

96.0%

KEV—79Cisco IOS XR Open Port Vulnerability—CVE-2010-3035—

93.0%

KEV—78Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—CVE-2020-3569—

88.6%

KEV—77Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability—CVE-2009-2055—

88.6%

KEV—77Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—