medium5.3
CVE-2020-10136
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access…
Impact
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Nx-Os | Versions 5.2\(1\)sk3\(1.1\), 5.2\(1\)sk3\(2.1\), 5.2\(1\)sk3\(2.1a\), 5.2\(1\)sk3\(2.2\), 5.2\(1\)sk3\(2.2b\), 5.2\(1\)sm1\(5.1\) |
| Cisco | Ucs Manager | Version 3.2\(3n\)a |
| Digi | Saros | before 8.1.0.1 |
| Hp | X3220nr Firmware | before 3.00.11.08 |
| Treck | Tcp\/Ip | before 6.0.1.67 |
| Cisco | Unified Computing System | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://datatracker.ietf.org/doc/html/rfc6169
- https://kb.cert.org/vuls/id/636397/
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4
- https://www.digi.com/resources/security
- https://www.kb.cert.org/vuls/id/636397
- https://datatracker.ietf.org/doc/html/rfc6169
- https://kb.cert.org/vuls/id/636397/
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4
- https://www.digi.com/resources/security
- https://www.kb.cert.org/vuls/id/199397
- https://www.kb.cert.org/vuls/id/636397