Lucene search

K
cve[email protected]CVE-2013-7308
HistoryJan 23, 2014 - 5:55 p.m.

CVE-2013-7308

2014-01-2317:55:00
NVD-CWE-Other
web.nvd.nist.gov
22
cve-2013-7308
ospf
d-link
des-3810-28
switch
vulnerability
denial of service
remote attacker

6.4 Medium

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

46.6%

The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

6.4 Medium

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

46.6%