PT-2015-4943 · Seil · Seil/X1+3

Publicado 2015-02-28 · Atualizado 2015-03-04 · CVE-2015-0887

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SEIL/x86 Fuji routers versions 1.00 through 3.30 SEIL/X1 routers versions 3.50 through 4.70 SEIL/X2 routers versions 3.50 through 4.70 SEIL/B1 routers versions 3.50 through 4.70

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and device hang, via a crafted SSTP packet.

Recommendations For SEIL/x86 Fuji routers versions 1.00 through 3.30, update to a version outside of this range to resolve the issue. For SEIL/X1 routers versions 3.50 through 4.70, update to a version outside of this range to resolve the issue. For SEIL/X2 routers versions 3.50 through 4.70, update to a version outside of this range to resolve the issue. For SEIL/B1 routers versions 3.50 through 4.70, update to a version outside of this range to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0887

Produtos afetados

Seil/B1

Seil/X1

Seil/X2

Seil/X86 Fuji

Referências · 4

• http://seil.jp/support/security/a01541.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0887 · Nota de Segurança
• http://jvn.jp/en/jp/JVN63949115/index.html · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000031 · Aviso do Fabricante