CVE:CVE-2017-3752
CNNVD:CNNVD-201707-1518
Lenovo Flex System Fabric CN4093 10Gb Converged Scalable Switch等都是中国联想（Lenovo）公司的交换机设备。IBM 1G L2-7 SLB switch for Bladecenter等都是美国IBM公司的交换机设备。Open Shortest Path First(OSPF)routing protocol是使用在其中的一个链路状态(开放最短路优先)路由协议。
多款Lenovo和IBM Networking Switches中的Open Shortest Path First (OSPF) routing protocol实现存在安全漏洞。攻击者可利用该漏洞删除和更改路由选择表。以下产品受到影响：IBM 1G L2-7 SLB switch for Bladecenter；IBM Bladecenter 1:10G Uplink Ethernet switch Module；IBM BladeCenter Layer 2/3 Copper Ethernet Switch Module；IBM BladeCenter Virtual Fabric 10Gb Switch Module；IBM Flex System EN2092 1Gb Ethernet Scalable Switch；IBM Flex System? Fabric CN4093 10Gb Converged Scalable Switch；IBM Flex System? Fabric EN4093/EN4093R 10Gb Scalable Switch；IBM RackSwitch G8052；IBM RackSwitch G8124；IBM RackSwitch G8124E；IBM RackSwitch G8264；IBM RackSwitch G8264CS；IBM RackSwitch G8264T；IBM RackSwitch G8316；IBM Rackswitch G8332；Lenovo Flex System Fabric CN4093 10Gb Converged Scalable Switch；Lenovo Flex System Fabric EN4093R 10Gb Scalable Switch；Lenovo Flex System SI4091 System Interconnect Module；Lenovo RackSwitch G8052；Lenovo RackSwitch G8124E (ThinkAgile CX2200)；Lenovo RackSwitch G8264；Lenovo RackSwitch G8264CS；Lenovo RackSwitch G8272 (ThinkAgile CX4200/CX4600)；Lenovo RackSwitch G8296；Lenovo RackSwitch G8332。
solution:Upgrade ibm 1g_l2-7_slb to a higher version than 21.0.24.0,and avoid the version (,21.0.24.0]; Upgrade ibm 1 to a higher version than 10g_firmware,and avoid the version 10g_firmware; Upgrade ibm layer_2/3_copper_firmware to a higher version than 5.3.10.0,and avoid the version (,5.3.10.0]; Upgrade ibm virtual_fabric_10gb to a higher version than 7.8.12.0,and avoid the version (,7.8.12.0]; Upgrade ibm en2092_1gb_firmware to a higher version than 7.8.16.0,and avoid the version (,7.8.16.0]; Upgrade ibm fabric_cn4093_10gb_firmware to a higher version than 7.8.16.0,and avoid the version (,7.8.16.0]; Upgrade ibm fabric_en4093/en4093r_10gb_firmware to a higher version than 7.8.16.0,and avoid the version (,7.8.16.0]; Upgrade ibm g8052_firmware to a higher version than 7.9.19.0,and avoid the version (,7.9.19.0]; Upgrade ibm g8124_firmware to a higher version than 7.11.9.0,and avoid the version (,7.11.9.0]; Upgrade ibm g8124e_firmware to a higher version than 7.11.9.0,and avoid the version (,7.11.9.0]; Upgrade ibm g8264_firmware to a higher version than 7.9.19.0,and avoid the version (,7.9.19.0]; Upgrade ibm g8264cs_firmware to a higher version than 7.8.16.0,and avoid the version (,7.8.16.0]; Upgrade ibm g8264t_firmware to a higher version than 7.9.19.0,and avoid the version (,7.9.19.0]; Upgrade ibm g8316_firmware to a higher version than 7.9.19.0,and avoid the version (,7.9.19.0]; Upgrade ibm g8332_firmware to a higher version than 7.7.25.0,and avoid the version (,7.7.25.0]; Upgrade lenovo fabric_cn4093_10gb_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo fabric_en4093r_10gb_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo si4091_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo g8052_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo g8124e_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo g8264_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo g8264cs_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo g8272_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo g8296_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]; Upgrade lenovo g8332_firmware to a higher version than 8.4.3.0,and avoid the version (,8.4.3.0]