5.3

CVE-2020-10136: cisco nx-os Authentication Bypass by Spoofing

CVSS: 5.3v3.1MediumModified
Published 02-06-2020Last modified 03-11-2025
Open JSON

Vulnerability summary

CVE-2020-10136 is a medium (CVSS 5.3) Authentication Bypass by Spoofing vulnerability in cisco nx-os. EPSS estimates a 28.54% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities.

Overall risk
27/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (NVD)
EPSS score
28.54%
0%100%
High · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 02-06-2020
    PublishedVulnerability first disclosed.
  2. 03-11-2025
    Last modifiedVulnerability information updated.

Description

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

28.54%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 28.54% on 18-09-2026

18-09-202618-10-2026
EPSS score
28.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco3 products
  • nx-os5.2\(1\)sk3\(1.1\) | 5.2\(1\)sk3\(2.1\) | 5.2\(1\)sk3\(2.1a\) | 5.2\(1\)sk3\(2.2\) | 5.2\(1\)sk3\(2.2b\) | 5.2\(1\)sm1\(5.1\) | 5.2\(1\)sm1\(5.2\) | 5.2\(1\)sm1\(5.2a\) | 5.2\(1\)sm1\(5.2b\) | 5.2\(1\)sm1\(5.2c\) | 5.2\(1\)sm3\(1.1\) | 5.2\(1\)sm3\(1.1a\) | 5.2\(1\)sm3\(1.1b\) | 5.2\(1\)sm3\(1.1c\) | 5.2\(1\)sm3\(2.1\) | 5.2\(1\)sv3\(1.1\) | 5.2\(1\)sv3\(1.2\) | 5.2\(1\)sv3\(1.3\) | 5.2\(1\)sv3\(1.4\) | 5.2\(1\)sv3\(1.4b\) | 5.2\(1\)sv3\(1.5a\) | 5.2\(1\)sv3\(1.5b\) | 5.2\(1\)sv3\(1.6\) | 5.2\(1\)sv3\(1.10\) | 5.2\(1\)sv3\(1.15\) | 5.2\(1\)sv3\(2.1\) | 5.2\(1\)sv3\(2.5\) | 5.2\(1\)sv3\(2.8\) | 5.2\(1\)sv3\(3.1\) | 5.2\(1\)sv3\(3.15\) | 5.2\(1\)sv3\(4.1\) | 5.2\(1\)sv3\(4.1a\) | 5.2\(1\)sv3\(4.1b\) | 5.2\(1\)sv5\(1.1\) | 5.2\(1\)sv5\(1.2\) | 5.2\(1\)sv5\(1.3\) | 5.0\(3\)a1\(1\) | 5.0\(3\)a1\(2\) | 5.0\(3\)a1\(2a\) | 5.0\(3\)u1\(1\) | 5.0\(3\)u1\(1a\) | 5.0\(3\)u1\(1b\) | 5.0\(3\)u1\(1c\) | 5.0\(3\)u1\(1d\) | 5.0\(3\)u1\(2\) | 5.0\(3\)u1\(2a\) | 5.0\(3\)u2\(1\) | 5.0\(3\)u2\(2\) | 5.0\(3\)u2\(2a\) | 5.0\(3\)u2\(2b\) | 5.0\(3\)u2\(2c\) | 5.0\(3\)u2\(2d\) | 5.0\(3\)u3\(1\) | 5.0\(3\)u3\(2\) | 5.0\(3\)u3\(2a\) | 5.0\(3\)u3\(2b\) | 5.0\(3\)u4\(1\) | 5.0\(3\)u5\(1\) | 5.0\(3\)u5\(1a\) | 5.0\(3\)u5\(1b\) | 5.0\(3\)u5\(1c\) | 5.0\(3\)u5\(1d\) | 5.0\(3\)u5\(1e\) | 5.0\(3\)u5\(1f\) | 5.0\(3\)u5\(1g\) | 5.0\(3\)u5\(1h\) | 5.0\(3\)u5\(1i\) | 5.0\(3\)u5\(1j\) | 6.0\(2\)a1\(1\) | 6.0\(2\)a1\(1a\) | 6.0\(2\)a1\(1b\) | 6.0\(2\)a1\(1c\) | 6.0\(2\)a1\(1d\) | 6.0\(2\)a1\(1e\) | 6.0\(2\)a1\(1f\) | 6.0\(2\)a1\(2d\) | 6.0\(2\)a3\(1\) | 6.0\(2\)a3\(2\) | 6.0\(2\)a3\(4\) | 6.0\(2\)a4\(1\) | 6.0\(2\)a4\(2\) | 6.0\(2\)a4\(3\) | 6.0\(2\)a4\(4\) | 6.0\(2\)a4\(5\) | 6.0\(2\)a4\(6\) | 6.0\(2\)u1\(1\) | 6.0\(2\)u1\(1a\) | 6.0\(2\)u1\(2\) | 6.0\(2\)u1\(3\) | 6.0\(2\)u1\(4\) | 6.0\(2\)u2\(1\) | 6.0\(2\)u2\(2\) | 6.0\(2\)u2\(3\) | 6.0\(2\)u2\(4\) | 6.0\(2\)u2\(4.92.4z\) | 6.0\(2\)u2\(5\) | 6.0\(2\)u2\(6\) | 6.0\(2\)u3\(1\) | 6.0\(2\)u3\(2\) | 6.0\(2\)u3\(3\) | 6.0\(2\)u3\(4\) | 6.0\(2\)u3\(5\) | 6.0\(2\)u3\(6\) | 6.0\(2\)u3\(7\) | 6.0\(2\)u3\(8\) | 6.0\(2\)u3\(9\) | 6.0\(2\)u4\(1\) | 6.0\(2\)u4\(2\) | 6.0\(2\)u4\(3\) | 6.0\(2\)u4\(4\) | 6.0\(2\)u5\(1\) | 6.1\(2\)i2\(2b\) | 6.1\(2\)i3\(1\) | 6.1\(2\)i3\(2\) | 6.1\(2\)i3\(3\) | 6.1\(2\)i3\(3a\) | 7.0\(3\)i1\(1\) | 7.0\(3\)i1\(1a\) | 7.0\(3\)i1\(1b\) | 7.0\(3\)i1\(1z\) | 5.2\(1\)n1\(1\) | 5.2\(1\)n1\(1a\) | 5.2\(1\)n1\(1b\) | 5.2\(1\)n1\(2\) | 5.2\(1\)n1\(2a\) | 5.2\(1\)n1\(3\) | 5.2\(1\)n1\(4\) | 5.2\(1\)n1\(5\) | 5.2\(1\)n1\(6\) | 5.2\(1\)n1\(7\) | 5.2\(1\)n1\(8\) | 5.2\(1\)n1\(8a\) | 5.2\(1\)n1\(8b\) | 5.2\(1\)n1\(9\) | 5.2\(1\)n1\(9a\) | 5.2\(1\)n1\(9b\) | 6.0\(2\)n1\(1\) | 6.0\(2\)n1\(1a\) | 6.0\(2\)n1\(2\) | 6.0\(2\)n1\(2a\) | 6.0\(2\)n2\(1\) | 6.0\(2\)n2\(1b\) | 6.0\(2\)n2\(2\) | 6.0\(2\)n2\(3\) | 6.0\(2\)n2\(4\) | 6.0\(2\)n2\(5\) | 6.0\(2\)n2\(5a\) | 6.0\(2\)n2\(5b\) | 6.0\(2\)n2\(6\) | 6.0\(2\)n2\(7\) | 7.0\(0\)n1\(1\) | 7.0\(1\)n1\(1\) | 7.0\(2\)n1\(1\) | 7.0\(3\)n1\(1\) | 7.0\(4\)n1\(1\) | 7.0\(4\)n1\(1a\) | 7.0\(5\)n1\(1\) | 7.0\(5\)n1\(1a\) | 7.0\(6\)n1\(1\) | 7.0\(6\)n1\(2s\) | 7.0\(6\)n1\(3s\) | 7.0\(6\)n1\(4s\) | 7.0\(7\)n1\(1\) | 7.0\(7\)n1\(1a\) | 7.0\(7\)n1\(1b\) | 7.0\(8\)n1\(1\) | 7.0\(8\)n1\(1a\) | 7.1\(0\)n1\(1\) | 7.1\(0\)n1\(1a\) | 7.1\(0\)n1\(1b\) | 7.1\(1\)n1\(1\) | 7.1\(1\)n1\(1a\) | 7.1\(2\)n1\(1\) | 7.1\(2\)n1\(1a\) | 7.1\(3\)n1\(1\) | 7.1\(3\)n1\(2\) | 7.1\(3\)n1\(2a\) | 7.1\(3\)n1\(3\) | 7.1\(3\)n1\(4\) | 7.1\(3\)n1\(5\) | 7.1\(4\)n1\(1\) | 7.1\(4\)n1\(1a\) | 7.1\(4\)n1\(1c\) | 7.1\(4\)n1\(1d\) | 7.1\(5\)n1\(1\) | 7.1\(5\)n1\(1b\) | 7.2\(1\)n1\(1\) | 7.3\(0\)n1\(1\) | 7.3\(0\)n1\(1a\) | 7.3\(0\)n1\(1b\) | 7.3\(1\)n1\(1\) | 7.3\(2\)n1\(1\) | 7.3\(2\)n1\(1b\) | 7.3\(2\)n1\(1c\) | 7.3\(3\)n1\(1\) | 7.3\(4\)n1\(1\) | 7.3\(4\)n1\(1a\) | 7.3\(5\)n1\(1\) | 7.3\(6\)n1\(1\) | 7.3\(6\)n1\(1a\) | 7.3\(7\)n1\(1\) | 7.3\(7\)n1\(1a\) | 5.2\(1\) | 5.2\(3\) | 5.2\(3a\) | 5.2\(4\) | 5.2\(5\) | 5.2\(7\) | 5.2\(9\) | 5.2\(9a\) | 6.2\(2\) | 6.2\(2a\) | 6.2\(6\) | 6.2\(6a\) | 6.2\(6b\) | 6.2\(8\) | 6.2\(8a\) | 6.2\(8b\) | 6.2\(10\) | 6.2\(12\) | 6.2\(14\) | 6.2\(14a\) | 6.2\(14b\) | 6.2\(16\) | 6.2\(18\) | 6.2\(20\) | 6.2\(20a\) | 6.2\(22\) | 6.2\(24\) | 7.2\(0\)d1\(1\) | 7.2\(1\)d1\(1\) | 7.2\(2\)d1\(1\) | 7.2\(2\)d1\(2\) | 7.2\(2\)d1\(3\) | 7.2\(2\)d1\(4\) | 7.3\(0\)d1\(1\) | 7.3\(0\)dx\(1\) | 7.3\(1\)d1\(1\) | 7.3\(2\)d1\(1\) | 7.3\(2\)d1\(1d\) | 7.3\(2\)d1\(2\) | 7.3\(2\)d1\(3\) | 7.3\(2\)d1\(3a\) | 7.3\(3\)d1\(1\) | 7.3\(4\)d1\(1\) | 7.3\(5\)d1\(1\) | 7.3\(6\)d1\(1\) | 6.1\(2\)i1\(2\) | 6.1\(2\)i1\(3\) | 6.1\(2\)i2\(1\) | 6.1\(2\)i2\(2\) | 6.1\(2\)i2\(2a\) | 6.1\(2\)i2\(3\)
  • ucs_manager3.2\(3n\)a
  • unified_computing_systemna
Digi1 product
Hp1 product
Ietf1 product
Treck1 product

5 vendors · 7 products

References

6 links