Unscored severity · published May 9, 2011
CVE-2011-1323
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Ip38x/1000 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/103 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/105 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/107e · Nec
All versions, or not specified · source: NVD
IP
Ip38x/1100 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/1200 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/140 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/1500 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/200 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/2000 · Nec
All versions, or not specified · source: NVD
IP
Ip38x/250i · Nec
All versions, or not specified · source: NVD
IP
Ip38x/300 · Nec
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1323
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1323
jvn.jp
http://jvn.jp/en/jp/JVN55714408/index.html
www.nec.co.jp
http://www.nec.co.jp/security-info/secinfo/nv11-004.html
www.rtpro.yamaha.co.jp
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN55714408.html
More from Ip38x/1000
–
CVE-2013-7314
The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA)…