PT-2007-4791 · 3Com · 3Com Intellijack Switch Nj220

Published 2007-07-03 · Updated 2017-07-29 · CVE-2007-3533

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions 3Com IntelliJack Switch NJ220 versions prior to 2.0.23

Description The issue allows remote attackers to cause a denial of service, resulting in a reboot and reporting outage. This can be achieved by sending a loopback packet with zero in the length field.

Recommendations For versions prior to 2.0.23, update to version 2.0.23 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3533

Affected Products

3Com Intellijack Switch Nj220

References · 7

• http://secunia.com/advisories/25883 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3533 · Security Note
• http://osvdb.org/37791 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35172 · Note
• http://vupen.com/english/advisories/2007/2386 · Note
• http://securityfocus.com/bid/24705 · Note
• http://support.3com.com/infodeli/tools/nj/nj220_02_00_23_readme.pdf · Note