CVE-2020-10749
Quick assessment
Affected
Red Hat containernetworking/plugins
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Container Network Interface（CNI）是一个用于编写插件以配置Linux容器中网络接口的软件包。 Container Network Interface存在安全漏洞。攻击者可通过发送恶意的IPv6路由器通告利用该漏洞实施中间人攻击。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-10749
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
通道可被非端点访问(中间人攻击)
Source: CVE Program / CVE List V5
Vulnerability Title
Container Network Interface 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Container Network Interface（CNI）是一个用于编写插件以配置Linux容器中网络接口的软件包。 Container Network Interface存在安全漏洞。攻击者可通过发送恶意的IPv6路由器通告利用该漏洞实施中间人攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | containernetworking/plugins | all containernetworking/plugins versions before version 0.8.6 | - |
|
II. Public POCs for CVE-2020-10749
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | CVE-2020-10749 PoC (Kubernetes MitM attacks via IPv6 rogue router advertisements) | https://github.com/knqyf263/CVE-2020-10749 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-10749
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-10749 (1)
-
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10749 x_refsource_CONFIRM
Mailing List Discussions for CVE-2020-10749 (3)
-
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00065.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00063.html vendor-advisory x_refsource_SUSE
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJC/ vendor-advisory x_refsource_FEDORA
Other References for CVE-2020-10749 (1)
IV. Related Vulnerabilities
Same vendor: Red Hat
-
CVE-2026-104988
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentic -
CVE-2026-95512
Freetype: freetype: denial of service via repeated subroutin -
CVE-2026-86345
389-ds-base: 389-ds-base: starttls plaintext-buffer retentio -
CVE-2026-86344
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool -
CVE-2026-103884
Keycloak-services: keycloak-services: path traversal in x.50
Same weakness: CWE-300
-
CVE-2026-97866
Zhonglun CloudPOS Automatic Update Program.cs channel access -
CVE-2026-12991
Multiple vulnerabilities in Ghost Robotics' Vision 60 -
CVE-2025-40770
Siemens SINEC Traffic Analyzer 安全漏洞 -
CVE-2025-54792
LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leadin -
CVE-2024-50568
Fortinet FortiOS 安全漏洞
V. Comments for CVE-2020-10749
No comments yet