PT-2017-15217 · Seil · Seil/X2+4

Published 2017-04-28 · Updated 2017-05-11 · CVE-2017-2153

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SEIL/x86 Fuji versions 1.70 through 5.62 SEIL/BPV4 versions 5.00 through 5.62 SEIL/X1 versions 1.30 through 5.62 SEIL/X2 versions 1.30 through 5.62 SEIL/B1 versions 1.00 through 5.62

Description The issue allows remote attackers to cause a denial of service via specially crafted IPv4 UDP packets.

Recommendations For SEIL/x86 Fuji versions 1.70 through 5.62, update to a version later than 5.62 to resolve the issue. For SEIL/BPV4 versions 5.00 through 5.62, update to a version later than 5.62 to resolve the issue. For SEIL/X1 versions 1.30 through 5.62, update to a version later than 5.62 to resolve the issue. For SEIL/X2 versions 1.30 through 5.62, update to a version later than 5.62 to resolve the issue. For SEIL/B1 versions 1.00 through 5.62, update to a version later than 5.62 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-2153

Affected Products

Seil/B1

Seil/Bpv4

Seil/X1

Seil/X2

Seil/X86 Fuji

References · 3

• http://seil.jp/support/security/a01783.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2153 · Security Note
• http://jvn.jp/en/jp/JVN86171513/index.html · Note