CVE-2013-7314: Medium severity NEC Ip38x 1000 vulnerability
The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7314?
The severity of CVE-2013-7314 is classified as high due to its potential to cause a denial of service.
How do I fix CVE-2013-7314?
To fix CVE-2013-7314, ensure that your NEC IP38X series routers are updated to the latest firmware that addresses this vulnerability.
What systems are affected by CVE-2013-7314?
CVE-2013-7314 affects NEC IP38X, IX1000, IX2000, and IX3000 routers along with several specific models within the IP38X series.
What type of attack does CVE-2013-7314 facilitate?
CVE-2013-7314 facilitates a denial of service attack through the exploitation of duplicate Link State ID values in Link State Advertisement packets.
Is CVE-2013-7314 remotely exploitable?
Yes, CVE-2013-7314 is remotely exploitable, allowing attackers to disrupt routing operations from a distant location.