Description
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
Published: 2020-06-02
Score: 5.3 Medium
EPSS: 15.1% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Customers should apply the latest patch provided by the affected vendor that addresses this issue and prevents unspecified IP-in-IP packets from being processed. Devices manufacturers are urged to disable IP-in-IP in their default configuration and require their customers to explicitly configure IP-in-IP as and when needed.


Vendor Workaround

Users can block IP-in-IP packets by filtering IP protocol number 4. Note this filtering is for the IPv4 Protocol (or IPv6 Next Header) field value of 4 and not IP protocol version 4 (IPv4).

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Nov 2025 21:30:00 +0000

Type Values Removed Values Added
References

Subscriptions

Cisco Nexus 1000v Nexus 1000ve Nexus 3016 Nexus 3048 Nexus 3064 Nexus 3064-t Nexus 3132q Nexus 3172 Nexus 5010 Nexus 5020 Nexus 5548p Nexus 5548up Nexus 5596t Nexus 5596up Nexus 56128p Nexus 5624q Nexus 5648q Nexus 5672up Nexus 5696q Nexus 6001 Nexus 6004 Nexus 7000 Nexus 7700 Nexus 92304qc Nexus 92348gc-x Nexus 9236c Nexus 9272q Nexus 93108tc-ex Nexus 93108tc-fx Nexus 93120tx Nexus 93128tx Nexus 93180lc-ex Nexus 93180yc-ex Nexus 93180yc-fx Nexus 93216tc-fx2 Nexus 93240yc-fx2 Nexus 9332c Nexus 9332pq Nexus 93360yc-fx2 Nexus 9336c-fx2 Nexus 9336pq Aci Spine Nexus 9348gc-fxp Nexus 9364c Nexus 9372px Nexus 9372px-e Nexus 9372tx Nexus 9372tx-e Nexus 9396px Nexus 9396tx Nexus 9504 Nexus 9508 Nexus 9516 Nx-os Ucs 6248up Ucs 6296up Ucs 6324 Ucs 6332 Ucs 6332-16up Ucs Manager Unified Computing System
Digi Saros
Hp X3220nr Firmware
Treck Tcp\/ip
cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2025-11-03T20:33:32.981Z

Reserved: 2020-03-05T00:00:00.000Z

Link: CVE-2020-10136

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-06-02T09:15:09.967

Modified: 2025-11-03T21:15:39.860

Link: CVE-2020-10136

cve-icon Redhat

Severity : Moderate

Publid Date: 2020-06-09T14:00:00Z

Links: CVE-2020-10136 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses