NetSight
medium5.4

CVE-2013-7310

The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before …

Impact

The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Affected products

VendorProductAffected versions
YamahaFwx120
All versions
YamahaRt105
All versions
YamahaRt107e
All versions
YamahaRt140
All versions
YamahaRt250i
All versions
YamahaRt300i
All versions
YamahaRtx1000
All versions
YamahaRtx1100
All versions
YamahaRtx1200
All versions
YamahaRtx1500
All versions
YamahaRtx2000
All versions
YamahaRtx3000
All versions

References