CVE-2013-4708
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
60.7%
The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| iij | seil\%2fx1_firmware | 1.00 | cpe:2.3:o:iij:seil\%2fx1_firmware:1.00:*:*:*:*:*:*:* |
| iij | seil\%2fx1_firmware | 4.30 | cpe:2.3:o:iij:seil\%2fx1_firmware:4.30:*:*:*:*:*:*:* |
| iij | seil\/x1 | * | cpe:2.3:h:iij:seil\/x1:*:*:*:*:*:*:*:* |
| iij | seil\%2fb1_firmware | 1.00 | cpe:2.3:o:iij:seil\%2fb1_firmware:1.00:*:*:*:*:*:*:* |
| iij | seil\%2fb1_firmware | 4.30 | cpe:2.3:o:iij:seil\%2fb1_firmware:4.30:*:*:*:*:*:*:* |
| iij | seil\/b1 | * | cpe:2.3:h:iij:seil\/b1:*:*:*:*:*:*:*:* |
| iij | seil\%2fx2_firmware | 1.00 | cpe:2.3:o:iij:seil\%2fx2_firmware:1.00:*:*:*:*:*:*:* |
| iij | seil\%2fx2_firmware | 4.30 | cpe:2.3:o:iij:seil\%2fx2_firmware:4.30:*:*:*:*:*:*:* |
| iij | seil\/x2 | * | cpe:2.3:h:iij:seil\/x2:*:*:*:*:*:*:*:* |
| iij | seil\%2fx86_firmware | 1.00 | cpe:2.3:o:iij:seil\%2fx86_firmware:1.00:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
60.7%