CVE-2017-3752

Severity: high (CVSS 8.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-09 · updated 2026-06-17
Weakness: CWE-20

Description

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.

Affected products

IBM 1:10G Firmware: through 7.4.16.0
IBM 1G L2-7 Slb: through 21.0.24.0
IBM En2092 1Gb Firmware: through 7.8.16.0
IBM Fabric Cn4093 10Gb Firmware: through 7.8.16.0
IBM Fabric En4093/En4093R 10Gb Firmware: through 7.8.16.0
IBM G8052 Firmware: through 7.9.19.0
IBM G8124 Firmware: through 7.11.9.0
IBM G8124E Firmware: through 7.11.9.0
IBM G8264 Firmware: through 7.9.19.0
IBM G8264Cs Firmware: through 7.8.16.0
IBM G8264T Firmware: through 7.9.19.0
IBM G8316 Firmware: through 7.9.19.0
IBM G8332 Firmware: through 7.7.25.0
IBM Layer 2/3 Copper Firmware: through 5.3.10.0
IBM Virtual Fabric 10Gb: through 7.8.12.0
Lenovo Fabric Cn4093 10Gb Firmware: through 8.4.3.0
Lenovo Fabric En4093R 10Gb Firmware: through 8.4.3.0
Lenovo G8052 Firmware: through 8.4.3.0
Lenovo G8124E Firmware: through 8.4.3.0
Lenovo G8264 Firmware: through 8.4.3.0
Lenovo G8264Cs Firmware: through 8.4.3.0
Lenovo G8272 Firmware: through 8.4.3.0
Lenovo G8296 Firmware: through 8.4.3.0
Lenovo G8332 Firmware: through 8.4.3.0
Lenovo Si4091 Firmware: through 8.4.3.0

References

Get alerted when CVE-2017-3752 or the next vulnerability affects your stack