CVE-2017-3752 Vulnerability Details

  /     /     /  

CVE-2017-3752 Metadata Quick Info

CVE Published: 09/08/2017 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: lenovo | Vendor: Lenovo Group Ltd. | Product: Lenovo and IBM Switch Products
Status : PUBLISHED

---

CVE-2017-3752 Description

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Erasure or alteration of routing tables within a routing domain
Source: Lenovo Group Ltd.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description: