CVE-2020-10136

mediumpriority · track · 41EPSS 0.285 · 98 %ileexploit · PoCEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

28.5% (98th) EPSS

CVSS 5 · medium

Is it mine?

281 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · scored 2026-10-27

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedCisco NX-OS Software 7.3(0)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(0)DX(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(1)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(2)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(2)D1(1d) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(2)D1(2) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(2)D1(3) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(2)D1(3a) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(3)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(4)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(5)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco NX-OS Software 7.3(6)D1(1) when installed on Cisco Nexus 7000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Unified Computing System (Managed)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–8.6

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lprimary · NVD / NIST USexploitability 3.9 · impact 1.4

v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · Cisco PSIRT US

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · FSTEC (BDU) RU

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-290USprimaryCWE-290US

exploits (1)

Public proof-of-concept and weaponised exploit code.

PapayaJackal/ipeeyoupeewepeeScanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)PoC · poc_in_github

affected products (281)

Products and version ranges known to be affected.

showing 20 of 281

advisories (1)

Vendor and ecosystem advisories describing this.

cisco-sa-nxos-ipip-dos-kCT9X4Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability2020-06-01csaf · cisco_csafUS
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass certain security boundaries or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the affected device unexpectedly decapsulating and processing IP in IP packets that are destined to a locally configured IP address. An attacker could exploit this vulnerability by sending a crafted IP in IP packet to an affected device. A successful exploit could cause the affected device to unexpectedly decapsulate the IP in IP packet and forward the inner IP packet. This may result in IP packets bypassing input access control lists (ACLs) configured on the affected device or other security boundaries defined elsewhere in the network. Under certain conditions, an exploit could cause the network stack process to crash and restart multiple times, leading to a reload of the affected device and a DoS condition. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4"]

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisco_csaf NVD CVE.org MITRE

published 2020-06-02modified 2026-06-17

related (896)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-102764US	critical9.8OT critical	18.9% (97th)	KEV	2026-10-15
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Unde…
CVE-2026-104935US	—OT critical	86.8% (100th)	KEV	2026-10-13
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14…
CVE-2024-54085US	critical9.8OT critical	60.7% (99th)	KEV	2025-03-11
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerabili…
CVE-2024-4358US	critical9.8OT critical	97.5% (100th)	KEV	2024-05-29
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality v…
CVE-2023-50224US	—OT critical	20.0% (97th)	KEV	2024-05-03
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information o…

+891 more

references (20)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan