CVE-2020-10136
mediumPriorität · verfolgen · 41EPSS 0.285 · 98. PerzentilExploit · PoCEURUUSEPSS · bewertet 2026-10-27
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenCisco NX-OS Software 7.3(0)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(0)DX(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(1)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(2)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(2)D1(1d) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(2)D1(2) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(2)D1(3) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(2)D1(3a) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(3)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(4)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(5)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS Software 7.3(6)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Unified Computing System (Managed)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–8.6
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (1)
Öffentlicher Proof-of-Concept- und Exploit-Code.
betroffene Produkte (281)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- cisco-sa-nxos-ipip-dos-kCT9X4Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability2020-06-01csaf · cisco_csafUS
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass certain security boundaries or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the affected device unexpectedly decapsulating and processing IP in IP packets that are destined to a locally configured IP address. An attacker could exploit this vulnerability by sending a crafted IP in IP packet to an affected device. A successful exploit could cause the affected device to unexpectedly decapsulate the IP in IP packet and forward the inner IP packet. This may result in IP packets bypassing input access control lists (ACLs) configured on the affected device or other security boundaries defined elsewhere in the network. Under certain conditions, an exploit could cause the network stack process to crash and restart multiple times, leading to a reload of the affected device and a DoS condition. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4"]
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (20)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2020-10136cnnvd
- https://datatracker.ietf.org/doc/html/rfc6169cnnvd
- https://kb.cert.org/vuls/id/636397/cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-10136cnnvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4cnnvd
- https://vigilance.fr/vulnerability/Cisco-NX-OS-IP-filtering-bypass-with-encapsulation-32373cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.1917/cnnvd
- https://www.digi.com/resources/securitycnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan