PT-2015-4943 · Seil · Seil/X1+3

Published 2015-02-28 · Updated 2015-03-04 · CVE-2015-0887

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SEIL/x86 Fuji routers versions 1.00 through 3.30 SEIL/X1 routers versions 3.50 through 4.70 SEIL/X2 routers versions 3.50 through 4.70 SEIL/B1 routers versions 3.50 through 4.70

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and device hang, via a crafted SSTP packet.

Recommendations For SEIL/x86 Fuji routers versions 1.00 through 3.30, update to a version outside of this range to resolve the issue. For SEIL/X1 routers versions 3.50 through 4.70, update to a version outside of this range to resolve the issue. For SEIL/X2 routers versions 3.50 through 4.70, update to a version outside of this range to resolve the issue. For SEIL/B1 routers versions 3.50 through 4.70, update to a version outside of this range to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0887

Affected Products

Seil/B1

Seil/X1

Seil/X2

Seil/X86 Fuji

References · 4

• http://seil.jp/support/security/a01541.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0887 · Security Note
• http://jvn.jp/en/jp/JVN63949115/index.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000031 · Vendor Advisory