Vulnerability in Iij Seil\%2fb1 Firmware
CVE-2013-4708
The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.0 (Medium). Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.013 (68.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 68th percentile — 68.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Iij Seil\%2fb1 Firmware — versions 1.00, 4.30
- Iij Seil\%2fneu 2fe Plus Firmware — versions 1.80, 2.05, 2.15
- Iij Seil\%2fturbo Firmware — versions 1.80, 2.05, 2.15
- Iij Seil\%2fx1 Firmware — versions 1.00, 4.30
- Iij Seil\%2fx2 Firmware — versions 1.00, 4.30
- Iij Seil\%2fx86 Firmware — versions 1.00, 2.80
- Iij Seil\/b1
- Iij Seil\/neu 2fe Plus
- Iij Seil\/turbo
- Iij Seil\/x1
Weakness classification (CWE)
References
- www.seil.jp/support/security/a01388.html (Vendor Advisory)
- jvn.jp/en/jp/JVN40079308/index.html (third-party-advisory)
- osvdb.org/97619 (vdb-entry)
- jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000091.html (third-party-advisory)