Vulnerability in Iij Seil\%2fb1 Firmware
CVE-2013-4708
The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.013 (66.5th percentile) — read the EPSS interpretation.
Affected products
- Iij Seil\%2fb1_firmware — versions 1.00, 4.30
- Iij Seil\%2fneu_2fe_plus_firmware — versions 1.80, 2.05, 2.15
- Iij Seil\%2fturbo_firmware — versions 1.80, 2.05, 2.15
- Iij Seil\%2fx1_firmware — versions 1.00, 4.30
- Iij Seil\%2fx2_firmware — versions 1.00, 4.30
- Iij Seil\%2fx86_firmware — versions 1.00, 2.80
- Iij Seil\/b1
- Iij Seil\/neu_2fe_plus
- Iij Seil\/turbo
- Iij Seil\/x1
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)