NetSight
high8.2

CVE-2017-3752

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches.

Impact

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.

Affected products

VendorProductAffected versions
Ibm1g L2-7 Slb
through 21.0.24.0
Ibm1\
through 7.4.16.0
IbmLayer 2\/3 Copper Firmware
through 5.3.10.0
IbmVirtual Fabric 10gb
through 7.8.12.0
IbmEn2092 1gb Firmware
through 7.8.16.0
IbmFabric Cn4093 10gb Firmware
through 7.8.16.0
IbmFabric En4093\/En4093r 10gb Firmware
through 7.8.16.0
IbmG8052 Firmware
through 7.9.19.0
IbmG8124 Firmware
through 7.11.9.0
IbmG8124e Firmware
through 7.11.9.0
IbmG8264 Firmware
through 7.9.19.0
IbmG8264cs Firmware
through 7.8.16.0

Weakness classification

References