{"id":"CVE-2020-10136","state":"PUBLISHED","title":"IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic","description":"IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.","publishedAt":"2020-06-02T08:35:12.921Z","updatedAt":"2025-11-03T20:33:32.981Z","severity":null,"assigner":"certcc","products":["IETF RFC2003 - IP Encapsulation within IP"],"affected":[{"vendor":"IETF","product":"RFC2003 - IP Encapsulation within IP","versions":[{"version":"STD 1","status":"affected"}]}],"references":["https://kb.cert.org/vuls/id/636397/","https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4","https://www.digi.com/resources/security","https://www.kb.cert.org/vuls/id/636397","https://datatracker.ietf.org/doc/html/rfc6169","https://www.kb.cert.org/vuls/id/199397"],"weaknesses":["CWE-290"],"ingestedAt":"2026-10-29T19:46:21.897Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/10xxx/CVE-2020-10136.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-10136","state":"PUBLISHED","datePublished":"2020-06-02T08:35:12.921Z","dateUpdated":"2025-11-03T20:33:32.981Z","assignerShortName":"certcc","assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","dateReserved":"2020-03-05T00:00:00.000Z"},"containers":{"cna":{"title":"IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic","descriptions":[{"lang":"en","value":"IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing."}],"affected":[{"vendor":"IETF","product":"RFC2003 - IP Encapsulation within IP","versions":[{"version":"STD 1","status":"affected"}]}],"references":[{"url":"https://kb.cert.org/vuls/id/636397/","name":"VU#636397"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4"},{"url":"https://www.digi.com/resources/security"},{"url":"https://www.kb.cert.org/vuls/id/636397","name":"VU#636397"},{"url":"https://datatracker.ietf.org/doc/html/rfc6169","name":"Security Concerns with IP Tunneling"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-290","description":"CWE-290 Authentication Bypass by Spoofing","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"certcc","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","dateUpdated":"2024-06-17T21:10:04.191Z"},"credits":[{"lang":"en","value":"Thanks to Yannay Livneh for reporting this issue."}],"datePublic":"2020-06-01T00:00:00.000Z","solutions":[{"lang":"en","value":"Customers should apply the latest patch provided by the affected vendor that addresses this issue and prevents unspecified IP-in-IP packets from being processed. Devices manufacturers are urged to disable IP-in-IP in their default configuration and require their customers to explicitly configure IP-in-IP as and when needed."}],"source":{"discovery":"EXTERNAL"},"workarounds":[{"lang":"en","value":"Users can block IP-in-IP packets by filtering IP protocol number 4. Note this filtering is for the IPv4 Protocol (or IPv6 Next Header) field value of 4 and not IP protocol version 4 (IPv4)."}],"x_generator":{"engine":"cveClient/1.0.15"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://kb.cert.org/vuls/id/636397/","name":"VU#636397","tags":["x_transferred"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4","tags":["x_transferred"]},{"url":"https://www.digi.com/resources/security","tags":["x_transferred"]},{"url":"https://www.kb.cert.org/vuls/id/636397","name":"VU#636397","tags":["x_transferred"]},{"url":"https://datatracker.ietf.org/doc/html/rfc6169","name":"Security Concerns with IP Tunneling","tags":["x_transferred"]},{"url":"https://www.kb.cert.org/vuls/id/199397"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T20:33:32.981Z"}}]}}}