PT-2012-4144 · Seil · Seil/X2+3

Published 2012-06-15 · Updated 2012-06-18 · CVE-2012-2632

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SEIL routers versions SEIL/x86 1.00 through 2.35 SEIL/X1 versions 2.30 through 3.75 SEIL/X2 versions 2.30 through 3.75 SEIL/B1 versions 2.30 through 3.75

Description The issue arises when the http-proxy and application-gateway features are enabled, and the device fails to properly handle the CONNECT command. This allows remote attackers to bypass intended URL restrictions via a TCP session.

Recommendations For SEIL/x86 versions 1.00 through 2.35, disable the http-proxy and application-gateway features until a patch is available. For SEIL/X1 versions 2.30 through 3.75, restrict access to the application-gateway feature to minimize the risk of exploitation. For SEIL/X2 versions 2.30 through 3.75, consider disabling the http-proxy feature as a temporary workaround. For SEIL/B1 versions 2.30 through 3.75, avoid using the CONNECT command in the affected TCP sessions until the issue is resolved.

Fix

Related Identifiers

CVE-2012-2632

Affected Products

Seil/B1

Seil/X1

Seil/X2

Seil/X86

References · 4

• http://seil.jp/support/security/a01232.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2632 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000059 · Note
• http://jvn.jp/en/jp/JVN24646833/index.html · Note