Unscored severity · published Jan 23, 2014
CVE-2013-7310
The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing…
–
CVSS
0.8%
EPSS
No
On KEV
Description
The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FW
Fwx120 · Yamaha
All versions, or not specified · source: NVD
RT
Rt105 · Yamaha
All versions, or not specified · source: NVD
RT
Rt107e · Yamaha
All versions, or not specified · source: NVD
RT
Rt140 · Yamaha
All versions, or not specified · source: NVD
RT
Rt250i · Yamaha
All versions, or not specified · source: NVD
RT
Rt300i · Yamaha
All versions, or not specified · source: NVD
RT
Rtx1000 · Yamaha
All versions, or not specified · source: NVD
RT
Rtx1100 · Yamaha
All versions, or not specified · source: NVD
RT
Rtx1200 · Yamaha
All versions, or not specified · source: NVD
RT
Rtx1500 · Yamaha
All versions, or not specified · source: NVD
RT
Rtx2000 · Yamaha
All versions, or not specified · source: NVD
RT
Rtx3000 · Yamaha
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7310
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7310
US Government Resource
http://www.kb.cert.org/vuls/id/229804
US Government Resource
http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ
www.rtpro.yamaha.co.jp
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html