PT-2013-5152 · Seil · Seil/X2+5
Publicado
2013-10-01
·
Atualizado
2013-10-07
·
CVE-2013-4708
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
SEIL/x86 versions 1.00 through 2.80
SEIL/X1 versions 1.00 through 4.30
SEIL/X2 versions 1.00 through 4.30
SEIL/B1 versions 1.00 through 4.30
SEIL/Turbo versions 1.80 through 2.15
SEIL/neu 2FE Plus versions 1.80 through 2.15
Description
The PPP Access Concentrator generates predictable random numbers, allowing remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.
Recommendations
For SEIL/x86 versions 1.00 through 2.80, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication.
For SEIL/X1 versions 1.00 through 4.30, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication.
For SEIL/X2 versions 1.00 through 4.30, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication.
For SEIL/B1 versions 1.00 through 4.30, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication.
For SEIL/Turbo versions 1.80 through 2.15, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication.
For SEIL/neu 2FE Plus versions 1.80 through 2.15, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Seil/B1
Seil/Turbo
Seil/X1
Seil/X2
Seil/Neu 2Fe Plus
Seil/X86