Skip to main content

3Com Router CVE-2013-4806

HIGH
2013-08-12 hp-security-alert@hp.com
Denial Of Service HP 3Com Router 5500 24G 4Sfp Hi Switch With 2 Interface Slots 5500 24G Poe Ei Switch 5500 24G Poe Si Switch 5500 24G Sfp Dc Ei Switch 5500 24G Sfp Ei Switch 5500 24G Dc Ei Switch 5500 24G Ei Switch 5500 24G Si Switch 5500 48G Poe Ei Switch 5500 48G Poe Si Switch 5500 48G Ei Switch 5500 48G Si Switch 5500G 24 Ei 10 100 1000 No Power Supply Unit Switch 5500G 24 Ei Sfp No Power Supply Unit Switch 5500G 48 Ei 10 100 1000 No Power Supply Unit Switch H3C Ethernet Switch
7.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
7.0 HIGH
AV:N/AC:M/Au:S/C:P/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:P/I:N/A:C
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
None
Availability
C

Lifecycle Timeline

1
CVE Published
Aug 12, 2013 - 10:58 cve.org
HIGH 7.0

DescriptionCVE.org

The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote authenticated users to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

AnalysisAI

The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the. Rated high severity (CVSS 7.0), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote authenticated users to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Affected products include: Hp 3Com Router, Hp 5500-24G-4Sfp Hi Switch With 2 Interface Slots, Hp 5500-24G-Poe Ei Switch, Hp 5500-24G-Poe Si Switch, Hp 5500-24G-Sfp Dc Ei Switch.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in 3Com Router

View all
CVE-2013-2340 CRITICAL
10.0 Jul 06

Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658
CVE-2013-2341 HIGH
7.1 Jul 06

Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2013-4806 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy