CVE-2020-3569

Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it consume available memory and eventually crash. The memory consumption may negatively impact other processes that are running on the device. These vulnerabilities are due to the incorrect handling of IGMP packets. An attacker could exploit these vulnerabilities by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to immediately crash the IGMP process or cause memory exhaustion, resulting in other processes becoming unstable. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address these vulnerabilities.

• CWE-400
• CWE-770

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dvmrp-memexh-dSmpdvfzMitigation, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dvmrp-memexh-dSmpdvfzMitigation, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3569US Government Resource

Published

Sep 23, 2020

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35682Zoho ManageEngine ServiceDesk Plus before 11134 allows an Au…8.8
• CVE-2020-35683An issue was discovered in HCC Nichestack 3.0. The code that…7.5
• CVE-2020-35684An issue was discovered in HCC Nichestack 3.0. The code that…7.5
• CVE-2020-35685An issue was discovered in HCC Nichestack 3.0. The code that…9.1
• CVE-2020-35686The SECOMN service in Sound Research DCHU model software com…7.8
• CVE-2020-35687PHPFusion version 9.03.90 is vulnerable to CSRF attack which…4.3
• CVE-2020-35693On some Samsung phones and tablets running Android through 7…8.8
• CVE-2020-35698Thinkific Thinkific Online Course Creation Platform 1.0 is a…6.1
• CVE-2020-35700A second-order SQL injection issue in Widgets/TopDevicesCont…8.8
• CVE-2020-35701An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL…8.8
• CVE-2020-35702DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a…7.8
• CVE-2020-35704Daybyday 2.1.0 allows stored XSS via the Title parameter to …5.4