Lucene search

K
cve[email protected]CVE-2013-7310
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-7310

2022-10-0316:14:53
web.nvd.nist.gov
68
yamaha routers
ospf
implementation
vulnerability
denial of service
routing disruption
sensitive packet information
nvd
cve-2013-7310
cve-2013-0149

5.4 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.7%

The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Affected configurations

NVD
Node
yamahafwx120Match-
OR
yamahart105Match-
OR
yamahart107eMatch-
OR
yamahart140Match-
OR
yamahart250iMatch-
OR
yamahart300iMatch-
OR
yamahartx1000Match-
OR
yamahartx1100Match-
OR
yamahartx1200Match-
OR
yamahartx1500Match-
OR
yamahartx2000Match-
OR
yamahartx3000Match-
OR
yamahartx810Match-
OR
yamahasrt100Match-

5.4 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.7%