Vulnerabilites related to yamaha - rt140
Vulnerability from fkie_nvd
Published
2014-01-23 17:55
Modified
2024-11-21 02:00
Severity ?
Summary
The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:yamaha:fwx120:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2DBE3E44-1A97-4B6D-912C-609D8B45D105",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rt105:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0FB4757E-B1D3-4B09-8545-2278263991C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rt107e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7824CDA3-7993-4EBF-9091-633009232300",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rt140:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C928105-7205-48E0-923B-4BABE8526D9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rt250i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "87CF6460-AF46-4EC7-AAE2-4A926ED199AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rt300i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2B7F2620-BCED-4450-A928-1EA29E20609F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rtx1000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9D16744D-5082-44C2-8A49-CDAB851EE88B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rtx1100:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9660F70D-A62D-44AC-9869-6A805E2714E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rtx1200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1BF07005-4053-4419-B9A7-F2591FF1F8F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rtx1500:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0FE8C15B-5030-4AA8-8FF6-4EE23D4AF8E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rtx2000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2EE0143C-2421-4BCF-A196-A04C04EFD757",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rtx3000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1A5187A4-5B0D-4ED8-B582-2A13CB3922BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:rtx810:-:*:*:*:*:*:*:*",
"matchCriteriaId": "32B7EF2A-748F-4EDE-82DD-B6D135097147",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:yamaha:srt100:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05CB1586-8031-46C7-89C7-C2F6B7818DF4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149."
},
{
"lang": "es",
"value": "La implementaci\u00f3n OSPF en routers Yamaha no considera la posibilidad de valores duplicados en paquetes Link State Advertisement (LSA) antes de realizar operaciones en la base de datos de LSA, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (interrupci\u00f3n de enrutamiento) u obtener informaci\u00f3n sensible de paquetes a trav\u00e9s de un paquete LSA, una vulnerabilidad relacionada con CVE-2013-0149."
}
],
"id": "CVE-2013-7310",
"lastModified": "2024-11-21T02:00:42.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 5.5,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2014-01-23T17:55:05.277",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/229804"
},
{
"source": "cve@mitre.org",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ"
},
{
"source": "cve@mitre.org",
"url": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/229804"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
cve-2013-7310
Vulnerability from cvelistv5
Published
2014-01-23 17:00
Modified
2024-09-16 20:47
Severity ?
EPSS score ?
Summary
The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html | x_refsource_CONFIRM | |
| http://www.kb.cert.org/vuls/id/229804 | third-party-advisory, x_refsource_CERT-VN | |
| http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T18:01:20.316Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html"
},
{
"name": "VU#229804",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/229804"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2014-01-23T17:00:00Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html"
},
{
"name": "VU#229804",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/229804"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-7310",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html",
"refsource": "CONFIRM",
"url": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html"
},
{
"name": "VU#229804",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/229804"
},
{
"name": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-7310",
"datePublished": "2014-01-23T17:00:00Z",
"dateReserved": "2014-01-23T00:00:00Z",
"dateUpdated": "2024-09-16T20:47:17.443Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
var-201401-0488
Vulnerability from variot
The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. The Open Shortest Path First (OSPF) protocol does not specify unique Link State Advertisement (LSA) lookup identifiers, which allow an attacker to intercept traffic or conduct a Denial of Service (DoS) attack. Yamaha routers is a router device. Multiple Yamaha products are prone to a remote security-bypass vulnerability due to an error in the OSPF protocol specification. Exploiting this issue could allow an attacker to bypass certain security restrictions and take full control of the OSPF AS domain routing table, blackholed traffic, and intercepted traffic. This may aid in further attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201401-0488",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "rt250i",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx3000",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "fwx120",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rt300i",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1200",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1500",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1100",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "srt100",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rt107e",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx810",
"scope": "eq",
"trust": 1.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx810",
"scope": null,
"trust": 1.4,
"vendor": "yamaha",
"version": null
},
{
"model": "fwx120",
"scope": null,
"trust": 1.4,
"vendor": "yamaha",
"version": null
},
{
"model": "rt105",
"scope": "eq",
"trust": 1.0,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx2000",
"scope": "eq",
"trust": 1.0,
"vendor": "yamaha",
"version": null
},
{
"model": "rt140",
"scope": "eq",
"trust": 1.0,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1000",
"scope": "eq",
"trust": 1.0,
"vendor": "yamaha",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "brocade",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "check point",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "d link",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "enterasys",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "extreme",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "ibm",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "juniper",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "nec",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "oracle",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "vyatta",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rt105 series",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rt107e",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rt140 series",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rt250i",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rt300i",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1000",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1100",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1200",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx1500",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx2000",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx3000",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "srt100",
"scope": null,
"trust": 0.8,
"vendor": "yamaha",
"version": null
},
{
"model": "rtx3000/rtx2000/rtx1500/rtx1200/rtx1100/rtx1000",
"scope": null,
"trust": 0.6,
"vendor": "yamaha",
"version": null
},
{
"model": "rt250i/rt300i/rt107e/rt105/rt140",
"scope": null,
"trust": 0.6,
"vendor": "yamaha",
"version": null
},
{
"model": "vyatta vrouter software",
"scope": "eq",
"trust": 0.3,
"vendor": "brocade",
"version": "6.6"
},
{
"model": "vyatta vrouter",
"scope": "eq",
"trust": 0.3,
"vendor": "brocade",
"version": "0"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#229804"
},
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "BID",
"id": "65163"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-493"
},
{
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:yamaha:fwx120",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rt105",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rt107e",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rt140",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rt250i",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rt300i",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rtx1000",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rtx1100",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rtx1200",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rtx1500",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rtx2000",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rtx3000",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:rtx810_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:yamaha:srt100",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dr. Gabi Nakibly from Rafael Advanced Defense Systems as joint work he conducted with Eitan Menahem, Yuval Elovici and Ariel Waizel of Telekom Innovation Laboratories at Ben Gurion University",
"sources": [
{
"db": "BID",
"id": "65163"
}
],
"trust": 0.3
},
"cve": "CVE-2013-7310",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 5.5,
"id": "CVE-2013-7310",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"availabilityRequirement": "HIGH",
"baseScore": 5.4,
"collateralDamagePotential": "MEDIUM-HIGH",
"confidentialityImpact": "PARTIAL",
"confidentialityRequirement": "NOT DEFINED",
"enviromentalScore": 5.1,
"exploitability": "PROOF-OF-CONCEPT",
"exploitabilityScore": 5.5,
"id": "CVE-2013-0149",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"integrityRequirement": "NOT DEFINED",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"remediationLevel": "OFFICIAL FIX",
"reportConfidence": "CONFIRMED",
"severity": "MEDIUM",
"targetDistribution": "MEDIUM",
"trust": 0.8,
"userInteractionRequired": null,
"vector_string": "AV:A/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 5.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 5.5,
"id": "CNVD-2014-00596",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 5.5,
"id": "VHN-67312",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:A/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-7310",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2013-0149",
"trust": 0.8,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2013-7310",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2014-00596",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201401-493",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-67312",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#229804"
},
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "VULHUB",
"id": "VHN-67312"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-493"
},
{
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. The Open Shortest Path First (OSPF) protocol does not specify unique Link State Advertisement (LSA) lookup identifiers, which allow an attacker to intercept traffic or conduct a Denial of Service (DoS) attack. Yamaha routers is a router device. Multiple Yamaha products are prone to a remote security-bypass vulnerability due to an error in the OSPF protocol specification. \nExploiting this issue could allow an attacker to bypass certain security restrictions and take full control of the OSPF AS domain routing table, blackholed traffic, and intercepted traffic. This may aid in further attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-7310"
},
{
"db": "CERT/CC",
"id": "VU#229804"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "BID",
"id": "65163"
},
{
"db": "VULHUB",
"id": "VHN-67312"
}
],
"trust": 3.24
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.kb.cert.org/vuls/id/229804",
"trust": 0.8,
"type": "poc"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#229804"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#229804",
"trust": 4.2
},
{
"db": "NVD",
"id": "CVE-2013-7310",
"trust": 3.4
},
{
"db": "JVN",
"id": "JVNVU96465452",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201401-493",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2014-00596",
"trust": 0.6
},
{
"db": "CERT/CC",
"id": "HTTP://WWW.KB.CERT.ORG/VULS/ID/CKIG-9AAHPZ",
"trust": 0.6
},
{
"db": "BID",
"id": "65163",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-67312",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#229804"
},
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "VULHUB",
"id": "VHN-67312"
},
{
"db": "BID",
"id": "65163"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-493"
},
{
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"id": "VAR-201401-0488",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "VULHUB",
"id": "VHN-67312"
}
],
"trust": 1.4313889
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00596"
}
]
},
"last_update_date": "2024-11-23T21:45:27.565000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "FC\u306e\u8a18\u8ff0\u306e\u4e0d\u6574\u5408\u3092\u8d77\u56e0\u3068\u3059\u308bOSPFv2\u306e\u8106\u5f31\u6027(VU#229804)\u306b\u3064\u3044\u3066",
"trust": 0.8,
"url": "http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html"
},
{
"title": "Yamaha\u0027s various routers OSPF routing protocol implementation design vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/43154"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "http://www.kb.cert.org/vuls/id/ckig-9aahpz"
},
{
"trust": 3.1,
"url": "http://www.rtpro.yamaha.co.jp/rt/faq/security/vu96465452.html"
},
{
"trust": 3.1,
"url": "http://www.kb.cert.org/vuls/id/229804"
},
{
"trust": 1.4,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-7310"
},
{
"trust": 0.8,
"url": "http://tools.ietf.org/html/rfc2328"
},
{
"trust": 0.8,
"url": "http://en.wikipedia.org/wiki/open_shortest_path_first"
},
{
"trust": 0.8,
"url": "https://supportcenter.checkpoint.com/supportcenter/portal?eventsubmit_dogoviewsolutiondetails=\u0026solutionid=sk94490"
},
{
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=30210"
},
{
"trust": 0.8,
"url": "https://cp-enterasys.kb.net/article.aspx?article=15134\u0026p=1"
},
{
"trust": 0.8,
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3t1019716"
},
{
"trust": 0.8,
"url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10582\u0026cat=sirt_1\u0026actp="
},
{
"trust": 0.8,
"url": "http://jpn.nec.com/security-info/secinfo/nv13-006.html"
},
{
"trust": 0.8,
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
},
{
"trust": 0.8,
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=kb79309\u0026actp=list"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-7310"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu96465452/"
},
{
"trust": 0.3,
"url": "http://jp.yamaha.com/"
},
{
"trust": 0.3,
"url": "http://www.kb.cert.org/vuls/id/bluu-98ms25"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#229804"
},
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "VULHUB",
"id": "VHN-67312"
},
{
"db": "BID",
"id": "65163"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-493"
},
{
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#229804"
},
{
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"db": "VULHUB",
"id": "VHN-67312"
},
{
"db": "BID",
"id": "65163"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-493"
},
{
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-08-02T00:00:00",
"db": "CERT/CC",
"id": "VU#229804"
},
{
"date": "2014-01-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"date": "2014-01-23T00:00:00",
"db": "VULHUB",
"id": "VHN-67312"
},
{
"date": "2014-01-23T00:00:00",
"db": "BID",
"id": "65163"
},
{
"date": "2014-01-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"date": "2014-01-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201401-493"
},
{
"date": "2014-01-23T17:55:05.277000",
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-12-06T00:00:00",
"db": "CERT/CC",
"id": "VU#229804"
},
{
"date": "2014-01-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00596"
},
{
"date": "2014-01-23T00:00:00",
"db": "VULHUB",
"id": "VHN-67312"
},
{
"date": "2014-01-23T00:00:00",
"db": "BID",
"id": "65163"
},
{
"date": "2014-01-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-005905"
},
{
"date": "2014-01-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201401-493"
},
{
"date": "2024-11-21T02:00:42.837000",
"db": "NVD",
"id": "CVE-2013-7310"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "specific network environment",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201401-493"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Open Shortest Path First (OSPF) Protocol does not specify unique LSA lookup identifiers",
"sources": [
{
"db": "CERT/CC",
"id": "VU#229804"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201401-493"
}
],
"trust": 0.6
}
}