CVE-2017-3752

Published Aug 9, 2017

Last updated 7 years ago

Overview

Description
An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.
Source
psirt@lenovo.com
NVD status
Analyzed

Risk scores

CVSS 3.0

Type
Primary
Base score
8.2
Impact score
6
Exploitability score
1.6
Vector string
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
4.3
Impact score
4.9
Exploitability score
5.5
Vector string
AV:A/AC:M/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-20

Social media

Hype score
Not currently trending

Configurations