What’s Vulnerable › Vulnerabilities

CVE-2013-7310

• Severity: medium (CVSS 5.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-23 · updated 2026-06-17

Description

The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Affected products

• Yamaha Fwx120: all versions
• Yamaha Rt105: all versions
• Yamaha Rt107E: all versions
• Yamaha Rt140: all versions
• Yamaha Rt250I: all versions
• Yamaha Rt300I: all versions
• Yamaha Rtx1000: all versions
• Yamaha Rtx1100: all versions
• Yamaha Rtx1200: all versions
• Yamaha Rtx1500: all versions
• Yamaha Rtx2000: all versions
• Yamaha Rtx3000: all versions
• Yamaha Rtx810: all versions
• Yamaha Srt100: all versions

References

• http://www.kb.cert.org/vuls/id/229804
• http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ
• http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html
• http://www.kb.cert.org/vuls/id/229804
• http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ
• http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html

Get alerted when CVE-2013-7310 or the next vulnerability affects your stack