What’s Vulnerable › Vulnerabilities

CVE-2013-7312

• Severity: medium (CVSS 5.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-23 · updated 2026-06-17

Description

The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Affected products

• Enterasys C5: all versions
• Enterasys G3: all versions
• Enterasys K10: all versions
• Enterasys K6: all versions
• Enterasys S130: all versions
• Enterasys S140: all versions
• Enterasys S150: all versions
• Enterasys S155: all versions
• Enterasys S180: all versions

References

• http://www.kb.cert.org/vuls/id/229804
• http://www.kb.cert.org/vuls/id/BLUU-985QS8
• https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3
• https://cp-enterasys.kb.net/article.aspx?article=15134&p=1
• http://www.kb.cert.org/vuls/id/229804
• http://www.kb.cert.org/vuls/id/BLUU-985QS8
• https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3
• https://cp-enterasys.kb.net/article.aspx?article=15134&p=1

Get alerted when CVE-2013-7312 or the next vulnerability affects your stack