CVE-2020-3569 is a critical vulnerability affecting Cisco IOS XR Software, specifically within the Distance Vector Multicast Routing Protocol (DVMRP) feature. This vulnerability allows an unauthenticated, remote attacker to crash the Internet Group Management Protocol (IGMP) process or exhaust system memory by sending crafted IGMP packets. Rated with a CVSS score of 8.6 (High), it has a network attack vector, low complexity, and high impact on availability, potentially affecting other critical processes. Notably, this vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog, and has garnered significant community discussion and media coverage, despite no public exploit code being available on platforms like Metasploit or ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.1.4CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xr:6.1.4:*:*:*:*:*:*:* | ||
6.2.3CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xr:6.2.3:*:*:*:*:*:*:* | ||
6.3.3CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xr:6.3.3:*:*:*:*:*:*:* | ||
6.4.2CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xr:6.4.2:*:*:*:*:*:*:* | ||
6.5.3CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xr:6.5.3:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.