CVE-2017-3752: Input Validation
An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3752?
CVE-2017-3752 has been classified as a high severity vulnerability due to its potential impact on routing protocols.
How do I fix CVE-2017-3752?
To fix CVE-2017-3752, it is essential to update the affected Lenovo switch firmware to the latest version provided by Lenovo.
What products are affected by CVE-2017-3752?
CVE-2017-3752 affects various Lenovo and IBM switch models, especially those utilizing OSPF routing protocol in specific firmware versions.
What are the potential impacts of CVE-2017-3752?
Exploitation of CVE-2017-3752 may allow attackers to erase or alter the routing tables of affected Lenovo switches.
Is CVE-2017-3752 exploitable remotely?
Yes, CVE-2017-3752 is considered to be exploitable remotely if specific conditions are met, making it critical to apply patches.