PT-2014-3349 · Brocade · Brocade Routers

Published 2014-01-23 · Updated 2014-01-23 · CVE-2013-7306

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Brocade routers (affected versions not specified)

Description The OSPF implementation does not account for duplicate Link State ID values in Link State Advertisement (LSA) packets, allowing remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-7306

Affected Products

Brocade Routers

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-7306 · Security Note
• http://kb.cert.org/vuls/id/229804 · Note
• http://kb.cert.org/vuls/id/BLUU-98MS25 · Note