CVEvulnerability

CVE-2020-10136

5.3 MEDIUM Published 2020-06-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-290

Description

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

Affected configurations

• cisco nx-os 5.2\(1\)sk3\(1.1\) • cisco nx-os 5.2\(1\)sk3\(2.1\) • cisco nx-os 5.2\(1\)sk3\(2.1a\) • cisco nx-os 5.2\(1\)sk3\(2.2\) • cisco nx-os 5.2\(1\)sk3\(2.2b\) • cisco nx-os 5.2\(1\)sm1\(5.1\) • cisco nx-os 5.2\(1\)sm1\(5.2\) • cisco nx-os 5.2\(1\)sm1\(5.2a\) • cisco nx-os 5.2\(1\)sm1\(5.2b\) • cisco nx-os 5.2\(1\)sm1\(5.2c\) • cisco nx-os 5.2\(1\)sm3\(1.1\) • cisco nx-os 5.2\(1\)sm3\(1.1a\) • cisco nx-os 5.2\(1\)sm3\(1.1b\) • cisco nx-os 5.2\(1\)sm3\(1.1c\) • cisco nx-os 5.2\(1\)sm3\(2.1\) • cisco nx-os 5.2\(1\)sv3\(1.1\) • cisco nx-os 5.2\(1\)sv3\(1.2\) • cisco nx-os 5.2\(1\)sv3\(1.3\) • cisco nx-os 5.2\(1\)sv3\(1.4\) • cisco nx-os 5.2\(1\)sv3\(1.4b\) • cisco nx-os 5.2\(1\)sv3\(1.5a\) • cisco nx-os 5.2\(1\)sv3\(1.5b\) • cisco nx-os 5.2\(1\)sv3\(1.6\) • cisco nx-os 5.2\(1\)sv3\(1.10\) • cisco nx-os 5.2\(1\)sv3\(1.15\) • cisco nx-os 5.2\(1\)sv3\(2.1\) • cisco nx-os 5.2\(1\)sv3\(2.5\) • cisco nx-os 5.2\(1\)sv3\(2.8\) • cisco nx-os 5.2\(1\)sv3\(3.1\) • cisco nx-os 5.2\(1\)sv3\(3.15\) • cisco nx-os 5.2\(1\)sv3\(4.1\) • cisco nx-os 5.2\(1\)sv3\(4.1a\) • cisco nx-os 5.2\(1\)sv3\(4.1b\) • cisco nx-os 5.2\(1\)sv5\(1.1\) • cisco nx-os 5.2\(1\)sv5\(1.2\) • cisco nx-os 5.2\(1\)sv5\(1.3\) • cisco nx-os 5.0\(3\)a1\(1\) • cisco nx-os 5.0\(3\)a1\(2\) • cisco nx-os 5.0\(3\)a1\(2a\) • cisco nx-os 5.0\(3\)u1\(1\) • cisco nx-os 5.0\(3\)u1\(1a\) • cisco nx-os 5.0\(3\)u1\(1b\) • cisco nx-os 5.0\(3\)u1\(1c\) • cisco nx-os 5.0\(3\)u1\(1d\) • cisco nx-os 5.0\(3\)u1\(2\) • cisco nx-os 5.0\(3\)u1\(2a\) • cisco nx-os 5.0\(3\)u2\(1\) • cisco nx-os 5.0\(3\)u2\(2\) • cisco nx-os 5.0\(3\)u2\(2a\) • cisco nx-os 5.0\(3\)u2\(2b\) • cisco nx-os 5.0\(3\)u2\(2c\) • cisco nx-os 5.0\(3\)u2\(2d\) • cisco nx-os 5.0\(3\)u3\(1\) • cisco nx-os 5.0\(3\)u3\(2\) • cisco nx-os 5.0\(3\)u3\(2a\) • cisco nx-os 5.0\(3\)u3\(2b\) • cisco nx-os 5.0\(3\)u4\(1\) • cisco nx-os 5.0\(3\)u5\(1\) • cisco nx-os 5.0\(3\)u5\(1a\) • cisco nx-os 5.0\(3\)u5\(1b\) … and 198 more

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References