CVE-2020-3569: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Description
CVE-2020-3569 is a vulnerability in Cisco IOS XR software affecting the Distance Vector Multicast Routing Protocol (DVMRP). The flaw involves improper handling of Internet Group Management Protocol (IGMP) packets, which can be exploited by an unauthenticated remote attacker to cause the IGMP process to crash immediately or consume excessive memory leading to a crash. This vulnerability has been exploited in the wild.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly processes IGMP packets, allowing an unauthenticated remote attacker to trigger memory exhaustion or immediate crash of the IGMP process. This can result in denial of service conditions on affected devices. The vulnerability is tracked as CVE-2020-3569 and has been observed in active exploitation scenarios.
Potential Impact
Successful exploitation can cause the IGMP process on Cisco IOS XR devices to crash or consume all available memory, leading to denial of service. This impacts network availability and stability on affected routers running IOS XR with DVMRP enabled.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor Cisco advisories for updates and consider limiting exposure of affected devices to untrusted networks until a fix is available.
Threat ID: 6adc6f603fe894698b2dd9a4
Added to database: 10/24/2026, 08:42:08 UTC
Last enriched: 10/24/2026, 09:27:38 UTC
Last updated: 10/24/2026, 09:30:24 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.