Lucene search

K
cve[email protected]CVE-2010-2363
HistoryAug 30, 2010 - 8:00 p.m.

CVE-2010-2363

2010-08-3020:00:01
CWE-264
web.nvd.nist.gov
23
ipv6
unicast
rpf
seil
x1
x2
b1
routers
firmware
security
vulnerability
cve-2010-2363

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.

Affected configurations

NVD
Node
iijseil\/x1_firmwareMatch1.10
OR
iijseil\/x1_firmwareMatch1.11
OR
iijseil\/x1_firmwareMatch1.20
OR
iijseil\/x1_firmwareMatch1.21
OR
iijseil\/x1_firmwareMatch1.22
OR
iijseil\/x1_firmwareMatch1.30
OR
iijseil\/x1_firmwareMatch1.31
OR
iijseil\/x1_firmwareMatch1.32
OR
iijseil\/x1_firmwareMatch1.40
OR
iijseil\/x1_firmwareMatch1.41
OR
iijseil\/x1_firmwareMatch1.43
OR
iijseil\/x1_firmwareMatch1.44
OR
iijseil\/x1_firmwareMatch2.10
OR
iijseil\/x1_firmwareMatch2.20
OR
iijseil\/x1_firmwareMatch2.30
OR
iijseil\/x1_firmwareMatch2.40
OR
iijseil\/x1_firmwareMatch2.41
OR
iijseil\/x1_firmwareMatch2.42
OR
iijseil\/x1_firmwareMatch2.50
OR
iijseil\/x1_firmwareMatch2.51
OR
iijseil\/x1_firmwareMatch2.52
OR
iijseil\/x1_firmwareMatch2.60
OR
iijseil\/x1_firmwareMatch2.61
OR
iijseil\/x1_firmwareMatch2.62
OR
iijseil\/x1_firmwareMatch2.63
OR
iijseil\/x1_firmwareMatch2.70
OR
iijseil\/x1_firmwareMatch2.72
OR
iijseil\/x1_firmwareMatch2.73
AND
iijseil\/x1
Node
iijseil\/x2_firmwareMatch1.00
OR
iijseil\/x2_firmwareMatch1.10
OR
iijseil\/x2_firmwareMatch1.11
OR
iijseil\/x2_firmwareMatch1.20
OR
iijseil\/x2_firmwareMatch1.21
OR
iijseil\/x2_firmwareMatch1.22
OR
iijseil\/x2_firmwareMatch1.30
OR
iijseil\/x2_firmwareMatch1.31
OR
iijseil\/x2_firmwareMatch1.32
OR
iijseil\/x2_firmwareMatch1.40
OR
iijseil\/x2_firmwareMatch1.41
OR
iijseil\/x2_firmwareMatch1.43
OR
iijseil\/x2_firmwareMatch1.44
OR
iijseil\/x2_firmwareMatch2.10
OR
iijseil\/x2_firmwareMatch2.20
OR
iijseil\/x2_firmwareMatch2.30
OR
iijseil\/x2_firmwareMatch2.40
OR
iijseil\/x2_firmwareMatch2.41
OR
iijseil\/x2_firmwareMatch2.42
OR
iijseil\/x2_firmwareMatch2.50
OR
iijseil\/x2_firmwareMatch2.51
OR
iijseil\/x2_firmwareMatch2.52
OR
iijseil\/x2_firmwareMatch2.60
OR
iijseil\/x2_firmwareMatch2.61
OR
iijseil\/x2_firmwareMatch2.62
OR
iijseil\/x2_firmwareMatch2.63
OR
iijseil\/x2_firmwareMatch2.70
OR
iijseil\/x2_firmwareMatch2.72
AND
iijseil\/x2
Node
iijseil\/b1_firmwareMatch1.00
OR
iijseil\/b1_firmwareMatch2.01
OR
iijseil\/b1_firmwareMatch2.10
OR
iijseil\/b1_firmwareMatch2.20
OR
iijseil\/b1_firmwareMatch2.30
OR
iijseil\/b1_firmwareMatch2.40
OR
iijseil\/b1_firmwareMatch2.41
OR
iijseil\/b1_firmwareMatch2.42
OR
iijseil\/b1_firmwareMatch2.50
OR
iijseil\/b1_firmwareMatch2.51
OR
iijseil\/b1_firmwareMatch2.52
OR
iijseil\/b1_firmwareMatch2.60
OR
iijseil\/b1_firmwareMatch2.61
OR
iijseil\/b1_firmwareMatch2.62
OR
iijseil\/b1_firmwareMatch2.63
OR
iijseil\/b1_firmwareMatch2.70
OR
iijseil\/b1_firmwareMatch2.72
AND
iijseil\/b1

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

Related for CVE-2010-2363