CVE-2013-4806 - CVE House
Back to Database
Status published High CVE-2013-4806

The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B,...

Vulnerability Description

The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote authenticated users to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4806

Credits & Attribution

No credits recorded in the NVD database.

References

More from hp

View All →
CVE-2022-48311
**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet...
Unknown 0
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP...
Medium 5.5
CVE-2020-15596
The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on...
Medium 6.7
CVE-2019-19539
An issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and...
Medium 5.5
CVE-2019-16240
A Buffer Overflow and Information Disclosure issue exists in HP...
Critical 9.1

Affected Vendor

Affected Software

3com router, 5500-24g-4sfp hi switch with 2 interface slots, 5500-24g-poe ei switch, 5500-24g-poe si switch, 5500-24g-sfp dc ei switch, 5500-24g-sfp ei switch, 5500-24g dc ei switch, 5500-24g ei switch, 5500-24g si switch, 5500-48g-poe ei switch, 5500-48g-poe si switch, 5500-48g ei switch, 5500-48g si switch, 5500g-24 ei 10\/100\/1000 no power supply unit switch, 5500g-24 ei sfp no power supply unit switch, 5500g-48 ei 10\/100\/1000 no power supply unit switch, h3c ethernet switch
Vulnerable Versions:
3012, 3018, 5012, 5232, 5642, 5642_taa, 5682, jg311a, jd378a, jd371a, jd379a, jd374a, jd373a, jd377a, jd369a, jd376a, jd372a, jd375a, jd370a, jf551a, jf553a, jf552a, s5600-26c, s5600-26c-pwr, s5600-26f, s5600-50c, s5600-50c-pwr

Timeline

Official Publish: August 12th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.