Tracker / CVE-2020-10136
CVE-2020-10136
Medium 5.3
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
Affected products and versions
| cisco | nx-os |
|---|---|
| cisco | ucs_manager |
| cisco | unified_computing_system |
| digi | saros · … → 8.1.0.1 |
| hp | x3220nr_firmware · … → 3.00.11.08 |
| treck | tcp\/ip · … → 6.0.1.67 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.