CVE-2020-3569— Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-3569
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it consume available memory and eventually crash. The memory consumption may negatively impact other processes that are running on the device. These vulnerabilities are due to the incorrect handling of IGMP packets. An attacker could exploit these vulnerabilities by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to immediately crash the IGMP process or cause memory exhaustion, resulting in other processes becoming unstable. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address these vulnerabilities.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco IOS XR 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IOS和Cisco IOS XR都是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS和Cisco IOS XR 中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco IOS XR Software | n/a | - |
II. Public POCs for CVE-2020-3569
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3569
请登录查看更多情报信息。
Same Patch Batch · Cisco · 2020-09-23 · 34 CVEs total
| CVE-2020-3116 | Cisco Webex Centers Denial of Service Vulnerability | |
| CVE-2019-16021 | Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | |
| CVE-2019-16023 | Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | |
| CVE-2019-16025 | Cisco Emergency Responder Stored Cross-Site Scripting Vulnerability | |
| CVE-2019-16028 | Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Byp | |
| CVE-2019-1736 | Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability | |
| CVE-2019-1888 | Cisco Unified Contact Center Express Privilege Escalation Vulnerability | |
| CVE-2019-1947 | Cisco Email Security Appliance Denial of Service Vulnerability | |
| CVE-2019-1983 | Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of S | |
| CVE-2019-16019 | Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | |
| CVE-2020-3117 | Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header I | |
| CVE-2020-3124 | Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability | |
| CVE-2020-3130 | Cisco Unity Connection Directory Traversal Vulnerability | |
| CVE-2020-3133 | Cisco Email Security Appliance Content Filter Bypass Vulnerability | |
| CVE-2020-3135 | Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | |
| CVE-2020-3137 | Cisco Email Security Appliance Cross-Site Scripting Vulnerability | |
| CVE-2020-3143 | Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Path Tr | |
| CVE-2019-15283 | Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulne | |
| CVE-2019-16017 | Cisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability | |
| CVE-2019-16009 | Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco IOS XR Software
- CVE-2026-20118
Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Int - CVE-2026-20046
Cisco IOS XR Software CLI Privilege Escalation Vulnerability - CVE-2026-20074
Cisco IOS XR Software Multi-Instance Intermediate System-to- - CVE-2026-20040
Cisco IOS XR Software CLI Privilege Escalation Vulnerability - CVE-2025-20340
Cisco IOS XR Address Resolution Protocol Broadcast Storm Vul
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-400
- CVE-2026-8187
Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption - CVE-2026-42343
FastGPT: Uncontrolled Resource Consumption leading to Sandbo - CVE-2026-42212
SolidCAM-GPPL-IDE: XML External Entity (XXE) and billion-lau - CVE-2026-32686
Unbounded exponent in decimal enables unauthenticated DoS - CVE-2026-20188
Cisco Crosswork Network Controller and Cisco Network Service
V. Comments for CVE-2020-3569
No comments yet