GCVE-VVD-CERTCC-2017-793496

Advisory PublishedCVSS 5.4/10

Vulnetix · Advisory published July 27, 2017

Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. Attackers with the ability to transmit messages from a routing domain router may send specially crafted OSPF messages to poison routing tables within the domain.

Download JSON Open in Console

Risk Scores

CVSS 2.0

5.4/10

Medium · AV:A/AC:M/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score4.9remediation_levelNDreport_confidenceCenvironmental_score3.63967774290225target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND