Buffer overflow in Iij Seil\%2fb1 Firmware
CVE-2013-4709
Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware before 4.32, SEIL/X2 with firmware before 4.32, SEIL/B1 with firmware before 4.32, SEIL/Turbo with firmware before 2.16, and SEIL/neu 2FE Plus with firmware before 2.16 allows remote attackers to execute arbitrary code via a crafted L2TP message.
Vulnerability class: Buffer Overflow
EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Iij Seil\%2fb1_firmware — versions 1.00, 4.31
- Iij Seil\%2fneu_2fe_plus_firmware — versions 2.05, 2.15
- Iij Seil\%2fturbo_firmware — versions 2.05, 2.15
- Iij Seil\%2fx1_firmware — versions 1.00, 4.31
- Iij Seil\%2fx86_firmware — versions 1.00, 2.81
- Iij Seil\/b1
- Iij Seil\/neu_2fe_plus
- Iij Seil\/turbo
- Iij Seil\/x1
- Iij Seil\/x2
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_JVN, Vendor Advisory, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, Vendor Advisory, third-party-advisory)