Search/CVE-2020-8554
● CVE — Medium

CVE-2020-8554

Vendorkubernetes, oracleProductkubernetes, communications cloud native core policy, communications cloud native core network slice selection function, communications cloud native core service communication proxyDiscoveredJan 21, 2021UpdatedJun 1, 2026

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.

View graph Watch Export
CVSS v3.1
6.3 MEDIUM
EPSS
8.72%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
▼ 0.55pp
9.27% → 8.72% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Connections
5 relationships
Timeline
disclosure → media coverage
Jan 21, 2021
Disclosure — published as a CVE record. · last revised by NVD Jun 1, 2026
Public PoC (5)
github.com/rancher/externalip-webhookgithub.com/jrmurray000/CVE-2020-8554github.com/twistlock/k8s-cve-2020-8554-mitigationsgithub.com/Dviejopomata/CVE-2020-8554github.com/alebedev87/gatekeeper-cve-2020-8554
Unverified third-party code — review before executing.