PT-2014-4425 · Seil · Seil/X2+5

Published 2014-06-16 · Updated 2014-06-16 · CVE-2014-2004

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SEIL/x86 routers versions 1.00 through 3.10 SEIL/X1 routers versions 1.00 through 4.50 SEIL/X2 routers versions 1.00 through 4.50 SEIL/B1 routers versions 1.00 through 4.50 SEIL/Turbo routers versions 1.80 through 2.17 SEIL/neu 2FE Plus routers versions 1.80 through 2.17

Description The issue allows remote attackers to cause a denial of service, resulting in either session termination or concentrator outage, by sending a crafted TCP packet to the PPP Access Concentrator.

Recommendations For SEIL/x86 routers versions 1.00 through 3.10, update to a version outside of this range to resolve the issue. For SEIL/X1 routers versions 1.00 through 4.50, update to a version outside of this range to resolve the issue. For SEIL/X2 routers versions 1.00 through 4.50, update to a version outside of this range to resolve the issue. For SEIL/B1 routers versions 1.00 through 4.50, update to a version outside of this range to resolve the issue. For SEIL/Turbo routers versions 1.80 through 2.17, update to a version outside of this range to resolve the issue. For SEIL/neu 2FE Plus routers versions 1.80 through 2.17, update to a version outside of this range to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-2004

Affected Products

Seil/B1

Seil/Turbo

Seil/X1

Seil/X2

Seil/Neu 2Fe Plus

Seil/X86

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-2004 · Security Note
• http://jvn.jp/en/jp/JVN10724763/index.html · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000055 · Note
• http://seil.jp/support/security/a01443.html · Note