CVE-2017-3752 Other in Lenovo and IBM Switch Products
Attackers can erase or alter OSPF routing tables on Lenovo switches, disrupting network connectivity and routing integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-3752?
CVE-2017-3752 is a high-severity vulnerability in Lenovo and IBM Switch Products, published on 9 Aug 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.
Weakness: CWE-20
Which versions are affected by CVE-2017-3752?
It affects 25 products.
Products include Ibm 1\, Ibm 1g L2-7 Slb, Ibm En2092 1gb Firmware, Ibm Fabric Cn4093 10gb Firmware, Ibm Fabric En4093\/En4093r 10gb Firmware, Ibm G8052 Firmware and 19 more.
How do I fix CVE-2017-3752?
No fix has been published for CVE-2017-3752 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-3752 being exploited?
There is no known exploitation of CVE-2017-3752 in the wild and no public exploit code.
Sources
Also known as GHSA-jx8q-f2pc-88fc.