CVE-2013-7314
Summary
| CVE | CVE-2013-7314 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-23 17:55:05 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. |
Risk And Classification
Primary CVSS: v2.0 6.8 from [email protected]
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 0.025260000 probability, percentile 0.855000000 (date 2026-05-03)
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Nec | Ip38x 1000 | - | All | All | All |
| Hardware | Nec | Ip38x 105 | - | All | All | All |
| Hardware | Nec | Ip38x 107e | - | All | All | All |
| Hardware | Nec | Ip38x 1100 | - | All | All | All |
| Hardware | Nec | Ip38x 1200 | - | All | All | All |
| Hardware | Nec | Ip38x 140 | - | All | All | All |
| Hardware | Nec | Ip38x 1500 | - | All | All | All |
| Hardware | Nec | Ip38x 2000 | - | All | All | All |
| Hardware | Nec | Ip38x 250i | - | All | All | All |
| Hardware | Nec | Ip38x 300 | - | All | All | All |
| Hardware | Nec | Ip38x 3000 | - | All | All | All |
| Hardware | Nec | Ip38x 810 | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| NV13-006: NEC製品セキュリティ情報 | NEC | af854a3a-2127-422b-91ae-364da2661108 | jpn.nec.com | Vendor Advisory |
| NEC Corporation Information for VU#229804 | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | US Government Resource |
| IX1000/IX2000/IX3000シリーズOSPF脆弱性問題(VU#229804)に関する御報告 : UNIVERGE IXシリーズ | NEC | af854a3a-2127-422b-91ae-364da2661108 | jpn.nec.com | Vendor Advisory |
| Vulnerability Note VU#229804 - Open Shortest Path First (OSPF) Protocol does not specify unique LSA lookup identifers | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | US Government Resource |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.