7
CVSSv2

CVE-2013-4806

Published: 12/08/2013 Updated: 04/01/2014
CVSS v2 Base Score: 7 | Impact Score: 7.8 | Exploitability Score: 6.8
VMScore: 623
Vector: AV:N/AC:M/Au:S/C:P/I:N/A:C

Vulnerability Summary

The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote authenticated users to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Vulnerable Product Search on Vulmon Subscribe to Product

hp 5500-24g-sfp dc ei switch jd379a

hp 5500-24g-sfp ei switch jd374a

hp 5500-24g-4sfp hi switch with 2 interface slots jg311a

hp 3com router 5642_taa

hp 3com router 3012

hp 3com router 5682

hp 5500-24g-poe ei switch jd378a

hp 5500-24g-poe si switch jd371a

hp 5500-48g ei switch jd375a

hp 5500-48g si switch jd370a

hp h3c ethernet switch s5600-50c

hp 3com router 3018

hp 5500g-24 ei sfp no power supply unit switch jf553a

hp 5500g-48 ei 10\\/100\\/1000 no power supply unit switch jf552a

hp 5500-48g-poe ei switch jd376a

hp 5500-48g-poe si switch jd372a

hp h3c ethernet switch s5600-26c

hp h3c ethernet switch s5600-50c-pwr

hp 3com router 5012

hp 5500g-24 ei 10\\/100\\/1000 no power supply unit switch jf551a

hp 5500-24g dc ei switch jd373a

hp 5500-24g ei switch jd377a

hp 5500-24g si switch jd369a

hp h3c ethernet switch s5600-26f

hp h3c ethernet switch s5600-26c-pwr

hp 3com router 5642

hp 3com router 5232