Cisco Issues Patches For 2 High-Severity IOS XR Flaws Under Active Attacks

🗓️ 30 Sep 2020 16:49:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 5 Views

Cisco patches two high-severity IOS XR flaws exploited in the wild in multicast routing.

Reporter	Title	Published	Views	Family All 33
ATTACKERKB	CVE-2020-3566 - Denial of service vulnerability in Cisco IOS XR	29 Aug 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-3569 - Denial of service vulnerability in Cisco IOS XR	29 Aug 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the Distance Vector Multicast Routing Protocol (DVMRP) implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.	3 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Distance Vector Multicast Routing Protocol (DVMRP) implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.	3 Sep 202000:00	–	bdu_fstec
Circl	CVE-2020-3566	31 Aug 202004:00	–	circl
Circl	CVE-2020-3569	27 Sep 202013:56	–	circl
CISA KEV Catalog	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA KEV Catalog	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	Cisco Releases Security Advisory for DVMRP Vulnerability in IOS XR Software	31 Aug 202000:00	–	cisa
Tenable Nessus	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities (cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz)	1 Sep 202000:00	–	nessus

30 Sep 2020 16:49Current

7.4High risk

Vulners AI Score7.4

CVSS 27.8

CVSS 3.18.6

EPSS0.03702

SSVC

Cisco IOS XR multicast routing denial of service multicast traffic software patches