Vulnerabilities CVE-2020-3566

CVE-2020-3566

Medium

Open

KEV

TLP:CLEAR

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Cisco — IOS XR — Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.

Details

EPSS Score ⓘ: 3.70%

88.7th percentile
Confidence: 100%
CISA KEV
Date Added: Nov 3, 2021
Patch Due: May 3, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.