Unscored severity · published Jan 23, 2014
CVE-2013-7312
The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before…
–
CVSS
1.1%
EPSS
No
On KEV
Description
The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C5
C5 · Enterasys
All versions, or not specified · source: NVD
G3
G3 · Enterasys
All versions, or not specified · source: NVD
K1
K10 · Enterasys
All versions, or not specified · source: NVD
K6
K6 · Enterasys
All versions, or not specified · source: NVD
S1
S130 · Enterasys
All versions, or not specified · source: NVD
S1
S140 · Enterasys
All versions, or not specified · source: NVD
S1
S150 · Enterasys
All versions, or not specified · source: NVD
S1
S155 · Enterasys
All versions, or not specified · source: NVD
S1
S180 · Enterasys
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7312
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7312
US Government Resource
http://www.kb.cert.org/vuls/id/229804
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-985QS8
community.enterasys.com
https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3
cp-enterasys.kb.net
https://cp-enterasys.kb.net/article.aspx?article=15134&p=1