CVE-2020-10136

medium · 5.3

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

5.3

CVSS

28.5%

EPSS (exploit prob.)

98th

EPSS percentile

2020-06-02

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses

CWE-290

Affected products

Vendor	Product	Affected versions
cisco	nx-os	5.2(1)sk3(1.1)
cisco	nx-os	5.2(1)sk3(2.1)
cisco	nx-os	5.2(1)sk3(2.1a)
cisco	nx-os	5.2(1)sk3(2.2)
cisco	nx-os	5.2(1)sk3(2.2b)
cisco	nx-os	5.2(1)sm1(5.1)
cisco	nx-os	5.2(1)sm1(5.2)
cisco	nx-os	5.2(1)sm1(5.2a)
cisco	nx-os	5.2(1)sm1(5.2b)
cisco	nx-os	5.2(1)sm1(5.2c)
cisco	nx-os	5.2(1)sm3(1.1)
cisco	nx-os	5.2(1)sm3(1.1a)
cisco	nx-os	5.2(1)sm3(1.1b)
cisco	nx-os	5.2(1)sm3(1.1c)
cisco	nx-os	5.2(1)sm3(2.1)
cisco	nx-os	5.2(1)sv3(1.1)
cisco	nx-os	5.2(1)sv3(1.2)
cisco	nx-os	5.2(1)sv3(1.3)
cisco	nx-os	5.2(1)sv3(1.4)
cisco	nx-os	5.2(1)sv3(1.4b)
cisco	nx-os	5.2(1)sv3(1.5a)
cisco	nx-os	5.2(1)sv3(1.5b)
cisco	nx-os	5.2(1)sv3(1.6)
cisco	nx-os	5.2(1)sv3(1.10)
cisco	nx-os	5.2(1)sv3(1.15)
cisco	nx-os	5.2(1)sv3(2.1)
cisco	nx-os	5.2(1)sv3(2.5)
cisco	nx-os	5.2(1)sv3(2.8)
cisco	nx-os	5.2(1)sv3(3.1)
cisco	nx-os	5.2(1)sv3(3.15)
cisco	nx-os	5.2(1)sv3(4.1)
cisco	nx-os	5.2(1)sv3(4.1a)
cisco	nx-os	5.2(1)sv3(4.1b)
cisco	nx-os	5.2(1)sv3(4.1b)
cisco	nx-os	5.2(1)sv3(4.1b)
cisco	nx-os	5.2(1)sv5(1.1)
cisco	nx-os	5.2(1)sv5(1.2)
cisco	nx-os	5.2(1)sv5(1.3)
cisco	nx-os	5.2(1)sv5(1.3)
cisco	nexus_1000v	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-10136