CVE-2013-7314
First published: Thu Jan 23 2014(Updated: )
The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NEC IP38X 1000 | ||
| NEC ip38x/105 | ||
| NEC ip38x/107e | ||
| NEC ip38x/1100 | ||
| NEC IP38X/1200 | ||
| NEC IP38X/140 | ||
| NEC IP38X | ||
| NEC ip38x/2000 | ||
| NEC IP380/250i | ||
| NEC ip38x/300 | ||
| NEC IP38X 3000 | ||
| NEC IP38X 810 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-7314?
The severity of CVE-2013-7314 is classified as high due to its potential to cause a denial of service.
How do I fix CVE-2013-7314?
To fix CVE-2013-7314, ensure that your NEC IP38X series routers are updated to the latest firmware that addresses this vulnerability.
What systems are affected by CVE-2013-7314?
CVE-2013-7314 affects NEC IP38X, IX1000, IX2000, and IX3000 routers along with several specific models within the IP38X series.
What type of attack does CVE-2013-7314 facilitate?
CVE-2013-7314 facilitates a denial of service attack through the exploitation of duplicate Link State ID values in Link State Advertisement packets.
Is CVE-2013-7314 remotely exploitable?
Yes, CVE-2013-7314 is remotely exploitable, allowing attackers to disrupt routing operations from a distant location.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/nec
- canonical/nec ip38x 1000
- canonical/nec ip38x/105
- canonical/nec ip38x/107e
- canonical/nec ip38x/1100
- canonical/nec ip38x/1200
- canonical/nec ip38x/140
- canonical/nec ip38x
- canonical/nec ip38x/2000
- canonical/nec ip380/250i
- canonical/nec ip38x/300
- canonical/nec ip38x 3000
- canonical/nec ip38x 810