cve-2020-3566

HIGH CVSS 8.6 vulncheck_kev
Description

Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.

Timeline
Published
2020-08-29 00:00 UTC
Last Modified
2020-08-29
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 8.6,
  "datePublished": "2020-08-29T00:00:00Z",
  "dateUpdated": "2020-08-29T00:00:00Z",
  "description": "Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.",
  "dueDate": "2022-05-03T00:00:00Z",
  "id": "CVE-2020-3566",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "IOS XR",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability",
  "vendor": "Cisco"
}
Enrichment data
View JSON API Download JSON