{"schema_version":"1","data":[{"id":3531,"advisory_id":"dc59958e-c6ad-4935-b7f3-02aacc045442","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3569","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:31.333687+00:00","extraction_method":"structured","technologies":["core-kev","ios-xr"],"cve_ids":["CVE-2020-3569"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","summary":"Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-3569","products":[{"name":{"value":"IOS XR","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-3569","aliases":["CVE-2020-3569"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-400"],"cveID":"CVE-2020-3569","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3569","dueDate":"2022-05-03","product":"IOS XR","dateAdded":"2021-11-03","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-3569","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3529,"advisory_id":"b33ac4ec-8561-400d-8eee-1a91b5f0b6d8","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3566","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:30.088917+00:00","extraction_method":"structured","technologies":["core-kev","ios-xr"],"cve_ids":["CVE-2020-3566"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","summary":"Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-3566","products":[{"name":{"value":"IOS XR","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-3566","aliases":["CVE-2020-3566"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-400"],"cveID":"CVE-2020-3566","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3566","dueDate":"2022-05-03","product":"IOS XR","dateAdded":"2021-11-03","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-3566","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3528,"advisory_id":"9d3ab7e5-446e-4e15-80b2-e37b9b2320b9","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3118","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:29.474897+00:00","extraction_method":"structured","technologies":["core-kev","ios-xr"],"cve_ids":["CVE-2020-3118"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","summary":"Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-3118","products":[{"name":{"value":"IOS XR","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-3118","aliases":["CVE-2020-3118"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-134"],"cveID":"CVE-2020-3118","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3118","dueDate":"2022-05-03","product":"IOS XR","dateAdded":"2021-11-03","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.","vulnerabilityName":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-3118","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2748,"advisory_id":"fdda8d3f-4445-4155-8e09-a49ef9af9cef","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-2055","source_published_at":"2022-03-25T00:00:00+00:00","published_at":"2026-10-24T21:23:49.51471+00:00","extraction_method":"structured","technologies":["core-kev","ios-xr"],"cve_ids":["CVE-2009-2055"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","summary":"Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2009-2055","products":[{"name":{"value":"IOS XR","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-2055","aliases":["CVE-2009-2055"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2009-2055","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-2055","dueDate":"2022-04-15","product":"IOS XR","dateAdded":"2022-03-25","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-2055","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2746,"advisory_id":"c0f24848-0ade-460a-9790-060906b6fca0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3035","source_published_at":"2022-03-25T00:00:00+00:00","published_at":"2026-10-24T21:23:48.379593+00:00","extraction_method":"structured","technologies":["core-kev","ios-xr"],"cve_ids":["CVE-2010-3035"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","summary":"Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2010-3035","products":[{"name":{"value":"IOS XR","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-3035","aliases":["CVE-2010-3035"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2010-3035","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-3035","dueDate":"2022-04-15","product":"IOS XR","dateAdded":"2022-03-25","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2010-3035","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2573,"advisory_id":"cd63290d-e856-48a8-b707-cab7923f074d","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20821","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:20:29.919662+00:00","extraction_method":"structured","technologies":["core-kev","ios-xr"],"cve_ids":["CVE-2022-20821"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS XR Open Port Vulnerability","summary":"Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-20821","products":[{"name":{"value":"IOS XR","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20821","aliases":["CVE-2022-20821"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-923"],"cveID":"CVE-2022-20821","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20821","dueDate":"2022-06-13","product":"IOS XR","dateAdded":"2022-05-23","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.","vulnerabilityName":"Cisco IOS XR Open Port Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-20821","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3531,"next_before":2573}