CVE-2013-7310

The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

CVSS v2.0 5.4 MEDIUM

5.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:A/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 5.5 / Impact : 6.4

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ	US Government Resource
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html
http://www.kb.cert.org/vuls/id/229804	US Government Resource

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:yamaha:rt105:-:::::::*
	cpe:2.3:h:yamaha:rt140:-:::::::*
	cpe:2.3:h:yamaha:rt250i:-:::::::*
	cpe:2.3:h:yamaha:fwx120:-:::::::*
	cpe:2.3:h:yamaha:srt100:-:::::::*
	cpe:2.3:h:yamaha:rt300i:-:::::::*
	cpe:2.3:h:yamaha:rtx1200:-:::::::*
	cpe:2.3:h:yamaha:rtx1100:-:::::::*
	cpe:2.3:h:yamaha:rtx1000:-:::::::*
	cpe:2.3:h:yamaha:rtx3000:-:::::::*
	cpe:2.3:h:yamaha:rtx810:-:::::::*
	cpe:2.3:h:yamaha:rt107e:-:::::::*
	cpe:2.3:h:yamaha:rtx1500:-:::::::*
	cpe:2.3:h:yamaha:rtx2000:-:::::::*

Information

Published : 2014-01-23 09:55

Updated : 2014-01-23 11:39

NVD link : CVE-2013-7310

Mitre link : CVE-2013-7310

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

yamaha

rtx810
rt105
rtx3000
rt107e
fwx120
rtx2000
rt300i
rtx1200
srt100
rt140
rtx1000
rtx1500
rtx1100
rt250i

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ", "name": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ", "tags": ["US Government Resource"], "refsource": "CONFIRM"}, {"url": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html", "name": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.kb.cert.org/vuls/id/229804", "name": "VU#229804", "tags": ["US Government Resource"], "refsource": "CERT-VN"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-7310", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.4, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-01-23T17:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:yamaha:rt105:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rt140:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rt250i:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:fwx120:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:srt100:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rt300i:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rtx1200:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rtx1100:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rtx1000:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rtx3000:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rtx810:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rt107e:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rtx1500:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:yamaha:rtx2000:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2014-01-23T19:39Z"}