Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-3752

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.

Published

2017-08-09T21:29:01.600

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 8.2 (HIGH)

CVSSv2 Vector

AV:A/AC:M/Au:N/C:N/I:P/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

5.5

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ibm 1g_l2-7_slb ≤ 21.0.24.0 Yes
Hardware ibm flex_system - No
Operating System ibm 1\ ≤ 7.4.16.0 Yes
Hardware ibm bladecenter - No
Operating System ibm layer_2\/3_copper_firmware ≤ 5.3.10.0 Yes
Hardware ibm bladecenter - No
Operating System ibm virtual_fabric_10gb ≤ 7.8.12.0 Yes
Hardware ibm bladecenter - No
Operating System ibm en2092_1gb_firmware ≤ 7.8.16.0 Yes
Hardware ibm flex_system - No
Operating System ibm fabric_cn4093_10gb_firmware ≤ 7.8.16.0 Yes
Hardware ibm flex_system - No
Operating System ibm fabric_en4093\/en4093r_10gb_firmware ≤ 7.8.16.0 Yes
Hardware ibm flex_system - No
Operating System ibm g8052_firmware ≤ 7.9.19.0 Yes
Hardware ibm rackswitch - No
Operating System ibm g8124_firmware ≤ 7.11.9.0 Yes
Hardware ibm rackswitch - No
Operating System ibm g8124e_firmware ≤ 7.11.9.0 Yes
Hardware ibm rackswitch - No
Operating System ibm g8264_firmware ≤ 7.9.19.0 Yes
Hardware ibm rackswitch - No
Operating System ibm g8264cs_firmware ≤ 7.8.16.0 Yes
Hardware ibm rackswitch - No
Operating System ibm g8264t_firmware ≤ 7.9.19.0 Yes
Hardware ibm rackswitch - No
Operating System ibm g8316_firmware ≤ 7.9.19.0 Yes
Hardware ibm rackswitch - No
Operating System ibm g8332_firmware ≤ 7.7.25.0 Yes
Hardware ibm rackswitch - No
Operating System lenovo fabric_cn4093_10gb_firmware ≤ 8.4.3.0 Yes
Hardware lenovo flex_system - No
Operating System lenovo fabric_en4093r_10gb_firmware ≤ 8.4.3.0 Yes
Hardware lenovo flex_system - No
Operating System lenovo si4091_firmware ≤ 8.4.3.0 Yes
Hardware lenovo flex_system - No
Operating System lenovo g8052_firmware ≤ 8.4.3.0 Yes
Hardware lenovo rackswitch - No
Operating System lenovo g8124e_firmware ≤ 8.4.3.0 Yes
Hardware lenovo rackswitch - No
Operating System lenovo g8264_firmware ≤ 8.4.3.0 Yes
Hardware lenovo rackswitch - No
Operating System lenovo g8264cs_firmware ≤ 8.4.3.0 Yes
Hardware lenovo rackswitch - No
Operating System lenovo g8272_firmware ≤ 8.4.3.0 Yes
Hardware lenovo rackswitch - No
Operating System lenovo g8296_firmware ≤ 8.4.3.0 Yes
Hardware lenovo rackswitch - No
Operating System lenovo g8332_firmware ≤ 8.4.3.0 Yes
Hardware lenovo rackswitch - No
References