Data Handling in Cisco Systems, Inc products - CVE-2020-10136

Vulnerability identifier: #VU28558

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2020-10136

CWE-ID: CWE-19

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Cisco Systems, Inc

Affected software:
Cisco NX-OS
Nexus 1000 Virtual Edge for VMware vSphere
Nexus 1000V Switch for Microsoft Hyper-V
Nexus 1000V Switch for VMware vSphere
Cisco Nexus 3000 Series Switches
Nexus 5500 Platform Switches
Nexus 5600 Platform Switches
Cisco Nexus 6000 Series Switches
Cisco Nexus 7000 Series Switches
Cisco Nexus 9000 Series Switches NX-OS Mode
UCS 6200 Series Fabric Interconnects
UCS 6300 Series Fabric Interconnects

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the affected device unexpectedly decapsulating and processing IP in IP packets that are destined to a locally configured IP address. A remote attacker can send a specially crafted IP in IP packet and cause a denial of service condition on the target device.

Install updates from vendor's website.

• https://kb.cert.org/vuls/id/636397/
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4
• https://www.digi.com/resources/security