Refine your search

10 vulnerabilities found for SEIL/X1 by Internet Initiative Japan Inc.

jvndb-2017-000071
Vulnerability from jvndb
Published
2017-04-19 14:43
Modified
2017-06-06 14:50
Severity ?
5.3 (Medium) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Summary
SEIL Series routers vulnerable to denial-of-service (DoS)
Details
The DNS forwarder, the PPP Access Concentrator (L2TP) and the Measure(iPerf server) function in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to a flaw in processing certain packets. Internet Initiative Japan Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Internet Initiative Japan Inc. coordinated under the Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000071.html",
  "dc:date": "2017-06-06T14:50+09:00",
  "dcterms:issued": "2017-04-19T14:43+09:00",
  "dcterms:modified": "2017-06-06T14:50+09:00",
  "description": "The DNS forwarder, the PPP Access Concentrator (L2TP) and the Measure(iPerf server) function in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to a flaw in processing certain packets.\r\n\r\nInternet Initiative Japan Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Internet Initiative Japan Inc. coordinated under the Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000071.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fbpv4",
      "@product": "SEIL/BPV4",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil_x86_fuji",
      "@product": "SEIL/x86 Fuji",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "5.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
      "@version": "2.0"
    },
    {
      "@score": "5.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000071",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN86171513/index.html",
      "@id": "JVN#86171513",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2153",
      "@id": "CVE-2017-2153",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-2153",
      "@id": "CVE-2017-2153",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "SEIL Series routers vulnerable to denial-of-service (DoS)"
}

jvndb-2015-000031
Vulnerability from jvndb
Published
2015-02-27 15:39
Modified
2015-03-05 15:42
Severity ?
() - -
Summary
SEIL Series routers vulnerable to denial-of-service (DoS)
Details
The PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to a flaw in processing SSTP packets.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000031.html",
  "dc:date": "2015-03-05T15:42+09:00",
  "dcterms:issued": "2015-02-27T15:39+09:00",
  "dcterms:modified": "2015-03-05T15:42+09:00",
  "description": "The PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to a flaw in processing SSTP packets.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000031.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil_x86_fuji",
      "@product": "SEIL/x86 Fuji",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000031",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN63949115/index.html",
      "@id": "JVN#63949115",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0887",
      "@id": "CVE-2015-0887",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0887",
      "@id": "CVE-2015-0887",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-noinfo",
      "@title": "No Mapping(CWE-noinfo)"
    }
  ],
  "title": "SEIL Series routers vulnerable to denial-of-service (DoS)"
}

jvndb-2014-000136
Vulnerability from jvndb
Published
2014-12-01 15:24
Modified
2014-12-09 15:31
Severity ?
() - -
Summary
SEIL Series routers vulnerable to denial-of-service (DoS)
Details
The PPP Access Concentrator (PPPAC) and the Dial-Up Networking in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing certain packets (CWE-119). Note that this vulnerability is different from JVN#21907573.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000136.html",
  "dc:date": "2014-12-09T15:31+09:00",
  "dcterms:issued": "2014-12-01T15:24+09:00",
  "dcterms:modified": "2014-12-09T15:31+09:00",
  "description": "The PPP Access Concentrator (PPPAC) and the Dial-Up Networking in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing certain packets (CWE-119).\r\n\r\nNote that this vulnerability is different from JVN#21907573.",
  "link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000136.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fneu_2fe_plus",
      "@product": "SEIL/neu 2FE Plus",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fturbo",
      "@product": "SEIL/Turbo",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil_x86_fuji",
      "@product": "SEIL/x86 Fuji",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2014-000136",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN04895240/index.html",
      "@id": "JVN#04895240",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7256",
      "@id": "CVE-2014-7256",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7256",
      "@id": "CVE-2014-7256",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "SEIL Series routers vulnerable to denial-of-service (DoS)"
}

jvndb-2014-000135
Vulnerability from jvndb
Published
2014-12-01 15:18
Modified
2014-12-09 15:32
Severity ?
() - -
Summary
SEIL Series routers vulnerable to denial-of-service (DoS)
Details
SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing NTP requests. Note that this vulnerability is different from JVN#04895240.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000135.html",
  "dc:date": "2014-12-09T15:32+09:00",
  "dcterms:issued": "2014-12-01T15:18+09:00",
  "dcterms:modified": "2014-12-09T15:32+09:00",
  "description": "SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing NTP requests.\r\n\r\nNote that this vulnerability is different from JVN#04895240.",
  "link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000135.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil_x86_fuji",
      "@product": "SEIL/x86 Fuji",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2014-000135",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN21907573/index.html",
      "@id": "JVN#21907573",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7255",
      "@id": "CVE-2014-7255",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7255",
      "@id": "CVE-2014-7255",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "SEIL Series routers vulnerable to denial-of-service (DoS)"
}

jvndb-2014-000055
Vulnerability from jvndb
Published
2014-06-13 12:44
Modified
2014-06-17 16:11
Severity ?
() - -
Summary
SEIL Series routers vulnerable to denial-of-service (DoS)
Details
The PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing certain packets. (CWE-119)
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000055.html",
  "dc:date": "2014-06-17T16:11+09:00",
  "dcterms:issued": "2014-06-13T12:44+09:00",
  "dcterms:modified": "2014-06-17T16:11+09:00",
  "description": "The PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing certain packets. (CWE-119)",
  "link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000055.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fneu_2fe_plus",
      "@product": "SEIL/neu 2FE Plus",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fturbo",
      "@product": "SEIL/Turbo",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx86",
      "@product": "SEIL/x86",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fb1_firmware",
      "@product": "SEIL/B1 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fneu_2fe_plus_firmware",
      "@product": "SEIL/neu 2FE Plus firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fturbo_firmware",
      "@product": "SEIL/Turbo firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx1_firmware",
      "@product": "SEIL/X1 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx2_firmware",
      "@product": "SEIL/X2 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx86_firmware",
      "@product": "SEIL/x86 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2014-000055",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN10724763/index.html",
      "@id": "JVN#10724763",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2004",
      "@id": "CVE-2014-2004",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2004",
      "@id": "CVE-2014-2004",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "SEIL Series routers vulnerable to denial-of-service (DoS)"
}

jvndb-2013-000092
Vulnerability from jvndb
Published
2013-09-20 14:57
Modified
2013-09-30 16:46
Severity ?
() - -
Summary
SEIL Series routers vulnerable to buffer overflow
Details
SEIL Series routers contain a buffer overflow vulnerability. The PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contains a buffer overflow vulnerability in processing L2TP messages.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000092.html",
  "dc:date": "2013-09-30T16:46+09:00",
  "dcterms:issued": "2013-09-20T14:57+09:00",
  "dcterms:modified": "2013-09-30T16:46+09:00",
  "description": "SEIL Series routers contain a buffer overflow vulnerability.\r\n\r\nThe PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contains a buffer overflow vulnerability in processing L2TP messages.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000092.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fneu_2fe_plus",
      "@product": "SEIL/neu 2FE Plus",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fturbo",
      "@product": "SEIL/Turbo",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx86",
      "@product": "SEIL/x86",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fb1_firmware",
      "@product": "SEIL/B1 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fneu_2fe_plus_firmware",
      "@product": "SEIL/neu 2FE Plus firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fturbo_firmware",
      "@product": "SEIL/Turbo firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx1_firmware",
      "@product": "SEIL/X1 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx2_firmware",
      "@product": "SEIL/X2 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx86_firmware",
      "@product": "SEIL/x86 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.5",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000092",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN43152129/",
      "@id": "JVN#43152129",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4709",
      "@id": "CVE-2013-4709",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=http://support.apple.com/kb/CVE-2013-4709",
      "@id": "CVE-2013-4709",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "SEIL Series routers vulnerable to buffer overflow"
}

jvndb-2013-000091
Vulnerability from jvndb
Published
2013-09-20 14:52
Modified
2013-10-08 15:36
Severity ?
() - -
Summary
SEIL Series routers vulnerable in RADIUS authentication
Details
SEIL Series routers contain a vulnerability in RADIUS authentication. The PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contains an issue when generating random numbers used for RADIUS authentication, which may result in the generated random numbers to be easily predicted.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000091.html",
  "dc:date": "2013-10-08T15:36+09:00",
  "dcterms:issued": "2013-09-20T14:52+09:00",
  "dcterms:modified": "2013-10-08T15:36+09:00",
  "description": "SEIL Series routers contain a vulnerability in RADIUS authentication.\r\n\r\nThe PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contains an issue when generating random numbers used for RADIUS authentication, which may result in the generated random numbers to be easily predicted.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000091.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fneu_2fe_plus",
      "@product": "SEIL/neu 2FE Plus",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fturbo",
      "@product": "SEIL/Turbo",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx86",
      "@product": "SEIL/x86",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fb1_firmware",
      "@product": "SEIL/B1 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fneu_2fe_plus_firmware",
      "@product": "SEIL/neu 2FE Plus firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fturbo_firmware",
      "@product": "SEIL/Turbo firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx1_firmware",
      "@product": "SEIL/X1 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx2_firmware",
      "@product": "SEIL/X2 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:iij:seil%252fx86_firmware",
      "@product": "SEIL/x86 firmware",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "4.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000091",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN40079308/",
      "@id": "JVN#40079308",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4708",
      "@id": "CVE-2013-4708",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4708",
      "@id": "CVE-2013-4708",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "SEIL Series routers vulnerable in RADIUS authentication"
}

jvndb-2010-000032
Vulnerability from jvndb
Published
2010-08-25 13:54
Modified
2010-08-25 13:54
Severity ?
() - -
Summary
SEIL/X Series and SEIL/B1 IPv6 Unicast RPF vulnerability
Details
SEIL/X Series and SEIL/B1 contains a vulnerability in which IPv6 Unicast Reverse Path Forwarding (RPF) does not properly function in strict mode. SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contains a vulnerability in which IPv6 Unicast Reverse Path Forwarding (RPF) does not properly function in strict mode. Only IPv6 Unicast RPF in strict mode is vulnerable. According to the developer, IPv6 Unicast RPF in loose mode and IPv4 Unicast RPF are not affected by this vulnerability.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html",
  "dc:date": "2010-08-25T13:54+09:00",
  "dcterms:issued": "2010-08-25T13:54+09:00",
  "dcterms:modified": "2010-08-25T13:54+09:00",
  "description": "SEIL/X Series and SEIL/B1 contains a vulnerability in which  IPv6 Unicast Reverse Path Forwarding (RPF) does not properly function in strict mode.\r\n\r\nSEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contains a vulnerability in which  IPv6 Unicast Reverse Path Forwarding (RPF) does not properly function in strict mode.\r\n\r\nOnly IPv6 Unicast RPF in strict mode is vulnerable. According to the developer, IPv6 Unicast RPF in loose mode and IPv4 Unicast RPF are not affected by this vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-000032",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN12683004/index.html",
      "@id": "JVN#12683004",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2363",
      "@id": "CVE-2010-2363",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2363",
      "@id": "CVE-2010-2363",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "SEIL/X Series and SEIL/B1 IPv6 Unicast RPF vulnerability"
}

jvndb-2009-000069
Vulnerability from jvndb
Published
2009-11-02 16:42
Modified
2009-11-02 16:42
Severity ?
() - -
Summary
SEIL/X Series and SEIL/B1 buffer overflow vulnerability
Details
SEIL/X Series and SEIL/B1 contain a buffer overflow vulnerability. SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the URL filtering function, which may lead to a buffer overflow vulnerability.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000069.html",
  "dc:date": "2009-11-02T16:42+09:00",
  "dcterms:issued": "2009-11-02T16:42+09:00",
  "dcterms:modified": "2009-11-02T16:42+09:00",
  "description": "SEIL/X Series and SEIL/B1 contain a buffer overflow vulnerability.\r\n\r\nSEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the URL filtering function, which may lead to a buffer overflow vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000069.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.3",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2009-000069",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN06362164/index.html",
      "@id": "JVN#06362164",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4292",
      "@id": "CVE-2009-4292",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4292",
      "@id": "CVE-2009-4292",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/37154",
      "@id": "SA37154",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/54050",
      "@id": "54050",
      "@source": "XF"
    },
    {
      "#text": "http://www.vupen.com/english/advisories/2009/3111",
      "@id": "VUPEN/ADV-2009-3111",
      "@source": "VUPEN"
    },
    {
      "#text": "http://osvdb.org/59361",
      "@id": "59361",
      "@source": "OSVDB"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "SEIL/X Series and SEIL/B1 buffer overflow vulnerability"
}

jvndb-2009-000070
Vulnerability from jvndb
Published
2009-11-02 16:42
Modified
2009-11-02 16:42
Severity ?
() - -
Summary
SEIL/X Series and SEIL/B1 denial of service vulnerability
Details
SEIL/X Series and SEIL/B1 contain a denial of service (DoS) vulnerability. SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the NAT function, which may lead to a denial of service (DoS) vulnerability.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000070.html",
  "dc:date": "2009-11-02T16:42+09:00",
  "dcterms:issued": "2009-11-02T16:42+09:00",
  "dcterms:modified": "2009-11-02T16:42+09:00",
  "description": "SEIL/X Series and SEIL/B1 contain a denial of service (DoS) vulnerability.\r\n\r\nSEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the NAT function, which may lead to a denial of service (DoS) vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000070.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:iij:seil%2Fb1",
      "@product": "SEIL/B1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx1",
      "@product": "SEIL/X1",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:iij:seil%2Fx2",
      "@product": "SEIL/X2",
      "@vendor": "Internet Initiative Japan Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.8",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2009-000070",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN13011682/index.html",
      "@id": "JVN#13011682",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4293",
      "@id": "CVE-2009-4293",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4293",
      "@id": "CVE-2009-4293",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/37154",
      "@id": "SA37154",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/54050",
      "@id": "54050",
      "@source": "XF"
    },
    {
      "#text": "http://www.vupen.com/english/advisories/2009/3111",
      "@id": "VUPEN/ADV-2009-3111",
      "@source": "VUPEN"
    },
    {
      "#text": "http://osvdb.org/59361",
      "@id": "59361",
      "@source": "OSVDB"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "SEIL/X Series and SEIL/B1 denial of service vulnerability"
}