CVE-2013-3595

2014-01-2004:58:49

CWE-20

[email protected]

web.nvd.nist.gov

openmanage

web application

dell

powerconnect

switches

denial of service

cve-2013-3595

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.0%

JSON

The OpenManage web application 2.5 build 1.19 on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote authenticated users to cause a denial of service (device reset) via a direct request to an unspecified OSPF URL.

Affected configurations

NVD

Node

dellpowerconnect_3348Match1.2.1.3

dellpowerconnect_3524pMatch2.0.0.48

dellpowerconnect_5324Match2.0.1.4

CPENameOperatorVersion
dell:powerconnect_3348dell powerconnect 3348eq1.2.1.3
dell:powerconnect_3524pdell powerconnect 3524peq2.0.0.48
dell:powerconnect_5324dell powerconnect 5324eq2.0.1.4

CPE	Name	Operator	Version
dell:powerconnect_3348	dell powerconnect 3348	eq	1.2.1.3
dell:powerconnect_3524p	dell powerconnect 3524p	eq	2.0.0.48
dell:powerconnect_5324	dell powerconnect 5324	eq	2.0.1.4