CVE-2020-10136
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
Affected (261)
Products: Cisco: Nx Os, Ucs Manager, Unified Computing System · Digi: Saros · Hp: X3220nr Firmware · +1 more
Show all products
Cisco: Nx Os, Ucs Manager, Unified Computing System · Digi: Saros · Hp: X3220nr Firmware · Treck: Tcp/ip
Configuration A
Configuration B
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.2(1)n1(1) |
| Running on/with | Platform Versions |
|---|---|
Cisco Nexus 5010 | All versions |
Cisco Nexus 5020 | All versions |
Cisco Nexus 5548p | All versions |
Cisco Nexus 5548up | All versions |
Cisco Nexus 5596t | All versions |
Cisco Nexus 5596up | All versions |
Cisco Nexus 56128p | All versions |
Cisco Nexus 5624q | All versions |
Cisco Nexus 5648q | All versions |
Cisco Nexus 5672up | All versions |
Cisco Nexus 5696q | All versions |
Cisco Nexus 6001 | All versions |
Cisco Nexus 6004 | All versions |
Configuration D
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.1(2)i1(2) |
| Running on/with | Platform Versions |
|---|---|
Cisco Nexus 92304qc | All versions |
Cisco Nexus 92348gc X | All versions |
Cisco Nexus 9236c | All versions |
Cisco Nexus 9272q | All versions |
Cisco Nexus 93108tc Ex | All versions |
Cisco Nexus 93108tc Fx | All versions |
Cisco Nexus 93120tx | All versions |
Cisco Nexus 93128tx | All versions |
Cisco Nexus 93180lc Ex | All versions |
Cisco Nexus 93180yc Ex | All versions |
Cisco Nexus 93180yc Fx | All versions |
Cisco Nexus 93216tc Fx2 | All versions |
Cisco Nexus 93240yc Fx2 | All versions |
Cisco Nexus 9332c | All versions |
Cisco Nexus 9332pq | All versions |
Cisco Nexus 93360yc Fx2 | All versions |
Cisco Nexus 9336c Fx2 | All versions |
Cisco Nexus 9336pq Aci Spine | All versions |
Cisco Nexus 9348gc Fxp | All versions |
Cisco Nexus 9364c | All versions |
Cisco Nexus 9372px | All versions |
Cisco Nexus 9372px E | All versions |
Cisco Nexus 9372tx | All versions |
Cisco Nexus 9372tx E | All versions |
Cisco Nexus 9396px | All versions |
Cisco Nexus 9396tx | All versions |
Cisco Nexus 9504 | All versions |
Cisco Nexus 9508 | All versions |
Cisco Nexus 9516 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.2(3n)a |
| Running on/with | Platform Versions |
|---|---|
Cisco Ucs 6248up | All versions |
Cisco Ucs 6296up | All versions |
Cisco Ucs 6324 | All versions |
Cisco Ucs 6332 | All versions |
Cisco Ucs 6332 16up | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.00.11.08 |
| Running on/with | Platform Versions |
|---|---|
Hp X3220nr Firmware | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
References (11)
Source: cret@cert.org
Source: cret@cert.org
Vendor Advisory
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.