PT-2013-5152 · Seil · Seil/X2+5

Published 2013-10-01 · Updated 2013-10-07 · CVE-2013-4708

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SEIL/x86 versions 1.00 through 2.80 SEIL/X1 versions 1.00 through 4.30 SEIL/X2 versions 1.00 through 4.30 SEIL/B1 versions 1.00 through 4.30 SEIL/Turbo versions 1.80 through 2.15 SEIL/neu 2FE Plus versions 1.80 through 2.15

Description The PPP Access Concentrator generates predictable random numbers, allowing remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.

Recommendations For SEIL/x86 versions 1.00 through 2.80, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication. For SEIL/X1 versions 1.00 through 4.30, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication. For SEIL/X2 versions 1.00 through 4.30, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication. For SEIL/B1 versions 1.00 through 4.30, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication. For SEIL/Turbo versions 1.80 through 2.15, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication. For SEIL/neu 2FE Plus versions 1.80 through 2.15, update to a version that generates unpredictable random numbers to prevent bypassing RADIUS authentication.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-4708

Affected Products

Seil/B1

Seil/Turbo

Seil/X1

Seil/X2

Seil/Neu 2Fe Plus

Seil/X86

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-4708 · Security Note
• http://seil.jp/support/security/a01388.html · Vendor Advisory
• http://jvn.jp/en/jp/JVN40079308/index.html · Note
• http://osvdb.org/97619 · Note
• http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000091.html · Note