CVEvulnerability
CVE-2013-7310
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.4 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:P
Description
The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Affected configurations
• yamaha fwx120
• yamaha rt105
• yamaha rt107e
• yamaha rt140
• yamaha rt250i
• yamaha rt300i
• yamaha rtx1000
• yamaha rtx1100
• yamaha rtx1200
• yamaha rtx1500
• yamaha rtx2000
• yamaha rtx3000
• yamaha rtx810
• yamaha srt100
References
- http://www.kb.cert.org/vuls/id/229804 US Government Resource
- http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ US Government Resource
- http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html www.rtpro.yamaha.co.jp
- http://www.kb.cert.org/vuls/id/229804 US Government Resource
- http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ US Government Resource
- http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html www.rtpro.yamaha.co.jp