6.8

CVE-2013-7314

The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nec ≫ Ip38x 1000 Version -
Nec ≫ Ip38x 105 Version -
Nec ≫ Ip38x 107e Version -
Nec ≫ Ip38x 1100 Version -
Nec ≫ Ip38x 1200 Version -
Nec ≫ Ip38x 140 Version -
Nec ≫ Ip38x 1500 Version -
Nec ≫ Ip38x 2000 Version -
Nec ≫ Ip38x 250i Version -
Nec ≫ Ip38x 300 Version -
Nec ≫ Ip38x 3000 Version -
Nec ≫ Ip38x 810 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.725
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.kb.cert.org/vuls/id/229804
US Government Resource
http://jpn.nec.com/security-info/secinfo/nv13-006.html
Vendor Advisory
http://jpn.nec.com/univerge/ix/Support/CERT/VU229804.html
Vendor Advisory
http://www.kb.cert.org/vuls/id/BLUU-985QUQ
US Government Resource