Unscored severity · published Jan 23, 2014
CVE-2013-7314
The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA)…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I1
Ip38x 1000 · Nec
All versions, or not specified · source: NVD
I1
Ip38x 105 · Nec
All versions, or not specified · source: NVD
I1
Ip38x 107e · Nec
All versions, or not specified · source: NVD
I1
Ip38x 1100 · Nec
All versions, or not specified · source: NVD
I1
Ip38x 1200 · Nec
All versions, or not specified · source: NVD
I1
Ip38x 140 · Nec
All versions, or not specified · source: NVD
I1
Ip38x 1500 · Nec
All versions, or not specified · source: NVD
I2
Ip38x 2000 · Nec
All versions, or not specified · source: NVD
I2
Ip38x 250i · Nec
All versions, or not specified · source: NVD
I3
Ip38x 300 · Nec
All versions, or not specified · source: NVD
I3
Ip38x 3000 · Nec
All versions, or not specified · source: NVD
I8
Ip38x 810 · Nec
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7314
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7314
Vendor Advisory
http://jpn.nec.com/security-info/secinfo/nv13-006.html
Vendor Advisory
http://jpn.nec.com/univerge/ix/Support/CERT/VU229804.html
US Government Resource
http://www.kb.cert.org/vuls/id/229804
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-985QUQ
More from Ip38x 1000
–
CVE-2011-1323
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header…