CVE-2017-3752
High
Description
An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.
SeverityHigh
CVSS8.2
Exploit probability—
Product
Ibm 1g L2-7 Slb
PublishedAug 9, 2017
First seenAug 9, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm 1g_l2-7_slb | v ≤ 21.0.24.0 | — |
| ibm 1\ | 10g_firmware ≤ v ≤ 7.4.16.0 | — |
| ibm layer_2\/3_copper_firmware | v ≤ 5.3.10.0 | — |
| ibm virtual_fabric_10gb | v ≤ 7.8.12.0 | — |
| ibm en2092_1gb_firmware | v ≤ 7.8.16.0 | — |
| ibm fabric_cn4093_10gb_firmware | v ≤ 7.8.16.0 | — |
| ibm fabric_en4093\/en4093r_10gb_firmware | v ≤ 7.8.16.0 | — |
| ibm g8052_firmware | v ≤ 7.9.19.0 | — |
| ibm g8124_firmware | v ≤ 7.11.9.0 | — |
| ibm g8124e_firmware | v ≤ 7.11.9.0 | — |
| ibm g8264_firmware | v ≤ 7.9.19.0 | — |
| ibm g8264cs_firmware | v ≤ 7.8.16.0 | — |
| ibm g8264t_firmware | v ≤ 7.9.19.0 | — |
| ibm g8316_firmware | v ≤ 7.9.19.0 | — |
| ibm g8332_firmware | v ≤ 7.7.25.0 | — |
| lenovo fabric_cn4093_10gb_firmware | v ≤ 8.4.3.0 | — |
| lenovo fabric_en4093r_10gb_firmware | v ≤ 8.4.3.0 | — |
| lenovo si4091_firmware | v ≤ 8.4.3.0 | — |
| lenovo g8052_firmware | v ≤ 8.4.3.0 | — |
| lenovo g8124e_firmware | v ≤ 8.4.3.0 | — |
| lenovo g8264_firmware | v ≤ 8.4.3.0 | — |
| lenovo g8264cs_firmware | v ≤ 8.4.3.0 | — |
| lenovo g8272_firmware | v ≤ 8.4.3.0 | — |
| lenovo g8296_firmware | v ≤ 8.4.3.0 | — |
| lenovo g8332_firmware | v ≤ 8.4.3.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.