#cve20203566 — Public Fediverse posts on home.social

#Cisco released patches for two high-severity vulnerabilities in its IOS XR software, #CVE20203566 and #CVE20203569, that were being exploited in the wild. These vulnerabilities, found in the software's Distance Vector Multicast Routing Protocol ( #DVMRP) feature, could allow unauthenticated attackers to send specially crafted #IGMP packets (packets used for managing the membership of Internet Protocol multicast groups.), leading to a crash or memory exhaustion on affected devices. Cisco provided mitigations and has now issued Software Maintenance Upgrades to fully address these vulnerabilities.

Cisco IOS XR is a network operating system designed by Cisco Systems for their high-end carrier-grade routers that are part of the CRS series, ASR 9000, and XR12000. IOS XR aims to provide more stability and features necessary for today's ISPs and large enterprise IT networks, with an emphasis on modularity and a fully distributed forwarding plane for enhanced performance. It supports a wide range of routing protocols and features aimed at maintaining continuous system operation and improved network reliability.

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client