Improper input validation in Internet Initiative Japan Inc. Seil/b1
CVE-2017-2153
SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial of service via specially crafted IPv4 UDP packets.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.015 (72.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Internet Initiative Japan Inc. Seil/b1 — versions 1.00 to 5.62
- Internet Initiative Japan Inc. Seil/bpv4 — versions 5.00 to 5.62
- Internet Initiative Japan Inc. Seil/x1 — versions 1.30 to 5.62
- Internet Initiative Japan Inc. Seil/x2 — versions 1.30 to 5.62
- Internet Initiative Japan Inc. Seil/x86 Fuji — versions 1.70 to 5.62
- Seil B1
- Seil B1_firmware
- Seil Bpv_4
- Seil Bpv_4_firmware
- Seil X1
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_JVN, third-party-advisory)
Frequently asked questions
- What is CVE-2017-2153?
- CVE-2017-2153 is a high-severity vulnerability in Internet Initiative Japan Inc. Seil/b1, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2017-04-28.
- How severe is CVE-2017-2153?
- High severity. CVSS v3 base score is 7.5 out of 10.