CVE-2013-7309 - CVE House
Back to Database
Status published Medium CVE-2013-7309

The OSPF implementation in Extreme Networks EXOS does not consider...

Vulnerability Description

The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-7309

Credits & Attribution

No credits recorded in the NVD database.

References

More from extremenetworks

View All →
CVE-2020-18305
Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered...
Unknown 0
CVE-2020-16847
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated...
Medium 6.1
CVE-2020-16152
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive...
Critical 9.8
CVE-2020-13820
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a...
Medium 6.1
CVE-2020-13819
Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a...
Medium 6.1

Affected Vendor

extremenetworks

View all reports →

Affected Software

exos
Vulnerable Versions:
Unknown

Timeline

Official Publish: January 23rd, 2014
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.