« Volver al listado

CVE-2013-0570

Estado: ModificadaMedia (5.3)—

The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Network Operating System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-0570",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.9,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.3,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-07-13T21:29:00.280",
  "references": [
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83166",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83166",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166."
    },
    {
      "lang": "es",
      "value": "La característica Fibre Channel over Ethernet (FCoE) en los switches IBM System Networking y Blade Network Technology (BNT) que ejecutan IBM Networking Operating System (también conocido como NOS, antes BLADE Operating System) inunda los frames de datos con direcciones MAC desconocidas en todas las interfaces en la misma VLAN. Esto podría permitir que atacantes remotos obtengan información sensible en circunstancias oportunistas escuchando en el dominio de transmisión. IBM X-Force ID: 83166."
    }
  ],
  "lastModified": "2026-06-16T23:49:41.077",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:network_operating_system:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9F380FD-53EA-4ACD-829C-3FD599B39478"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:flex_system_fabric_cn4093:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0F222FF4-C720-4E7E-BFDA-EA1579F5EE64"
            },
            {
              "criteria": "cpe:2.3:h:ibm:flex_system_fabric_en4093:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BE8DCC71-EBB8-473E-BE38-2076452AF6E0"
            },
            {
              "criteria": "cpe:2.3:h:ibm:flex_system_si4093_:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "33F68866-49B2-47BC-9D95-7740D5DDD65D"
            },
            {
              "criteria": "cpe:2.3:h:ibm:rackswitch_g8124:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "96901ABF-A65F-4A07-892E-445C6AE170A1"
            },
            {
              "criteria": "cpe:2.3:h:ibm:rackswitch_g8124-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "17A52A64-1A70-47C1-86D3-D3B775D0307C"
            },
            {
              "criteria": "cpe:2.3:h:ibm:rackswitch_g8124-er:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "902D323A-7C2C-40CE-8241-C12FF9DAD48C"
            },
            {
              "criteria": "cpe:2.3:h:ibm:rackswitch_g8264:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F4D033F-5B82-4C4A-BD12-D6AF3D9986AD"
            },
            {
              "criteria": "cpe:2.3:h:ibm:rackswitch_g8264-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "20A9D6A8-4A91-4E5C-8209-8BFC82FA6127"
            },
            {
              "criteria": "cpe:2.3:h:ibm:rackswitch_g8264cs:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "11929E3F-DE7A-44AD-9111-A573C0EB9AD5"
            },
            {
              "criteria": "cpe:2.3:h:ibm:rackswitch_g8316:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B26833BE-762B-4124-A3E1-CCE50E80D35C"
            },
            {
              "criteria": "cpe:2.3:h:ibm:virtual_fabric:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "219AA40A-5B72-403A-988E-D9C697090F1B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}