Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-4806


The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote authenticated users to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.


Published

2013-08-12T10:58:49.527

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.0 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.8

Impact Score

7.8

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware hp 3com_router 3012 Yes
Hardware hp 3com_router 3018 Yes
Hardware hp 3com_router 5012 Yes
Hardware hp 3com_router 5232 Yes
Hardware hp 3com_router 5642 Yes
Hardware hp 3com_router 5642_taa Yes
Hardware hp 3com_router 5682 Yes
Hardware hp 5500-24g-4sfp_hi_switch_with_2_interface_slots jg311a Yes
Hardware hp 5500-24g-poe_ei_switch jd378a Yes
Hardware hp 5500-24g-poe_si_switch jd371a Yes
Hardware hp 5500-24g-sfp_dc_ei_switch jd379a Yes
Hardware hp 5500-24g-sfp_ei_switch jd374a Yes
Hardware hp 5500-24g_dc_ei_switch jd373a Yes
Hardware hp 5500-24g_ei_switch jd377a Yes
Hardware hp 5500-24g_si_switch jd369a Yes
Hardware hp 5500-48g-poe_ei_switch jd376a Yes
Hardware hp 5500-48g-poe_si_switch jd372a Yes
Hardware hp 5500-48g_ei_switch jd375a Yes
Hardware hp 5500-48g_si_switch jd370a Yes
Hardware hp 5500g-24_ei_10\/100\/1000_no_power_supply_unit_switch jf551a Yes
Hardware hp 5500g-24_ei_sfp_no_power_supply_unit_switch jf553a Yes
Hardware hp 5500g-48_ei_10\/100\/1000_no_power_supply_unit_switch jf552a Yes
Hardware hp h3c_ethernet_switch s5600-26c Yes
Hardware hp h3c_ethernet_switch s5600-26c-pwr Yes
Hardware hp h3c_ethernet_switch s5600-26f Yes
Hardware hp h3c_ethernet_switch s5600-50c Yes
Hardware hp h3c_ethernet_switch s5600-50c-pwr Yes

References