CVE-2013-0570

Опубликовано: 13 июл. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 2.9

EPSS Низкий

Описание

The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/83166
VDB Entry
Vendor Advisory
https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/83166
VDB Entry
Vendor Advisory
https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ibm:network_operating_system:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:ibm:flex_system_fabric_cn4093:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:flex_system_fabric_en4093:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:flex_system_si4093_:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:rackswitch_g8124:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:rackswitch_g8124-e:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:rackswitch_g8124-er:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:rackswitch_g8264:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:rackswitch_g8264-t:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:rackswitch_g8264cs:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:rackswitch_g8316:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:virtual_fabric:-:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00166

Низкий

5.3 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-r4fr-85m6-wmpr