Iij SEIL-X1/SEIL-X2/SEIL-B1 up to 2.30 Firmware memory corruption

Summaryinfo

A vulnerability was found in Iij SEIL-X1, SEIL-X2 and SEIL-B1 up to 2.30. It has been rated as critical. Affected by this issue is some unknown functionality of the component Firmware. The manipulation leads to memory corruption. This vulnerability is documented as CVE-2011-0454. There is not any exploit available.

Detailsinfo

A vulnerability was found in Iij SEIL-X1, SEIL-X2 and SEIL-B1 up to 2.30 and classified as critical. This issue affects an unknown function of the component Firmware. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with firmware 1.80 through 2.10 might allow remote attackers to execute arbitrary code via a PPPoE packet.

The weakness was released 03/01/2011 (Website). It is possible to read the advisory at jvn.jp. The identification of this vulnerability is CVE-2011-0454 since 01/14/2011. The exploitation is known to be easy. The attack needs to approached within the local network. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available.

The vulnerability is also documented in the databases at X-Force (65672), SecurityFocus (BID 46598†) and Secunia (SA43494†). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Iij

Name

• SEIL-B1
• SEIL-X1
• SEIL-X2

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11
• 2.12
• 2.13
• 2.14
• 2.15
• 2.16
• 2.17
• 2.18
• 2.19
• 2.20
• 2.21
• 2.22
• 2.23
• 2.24
• 2.25
• 2.26
• 2.27
• 2.28
• 2.29
• 2.30

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion