CVEvulnerability

CVE-2013-4708

4.0 MEDIUM Published 2013-10-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N
Weaknesses
CWE-310

Description

The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.

Affected configurations

• iij seil\%2fx1 firmware 1.00 • iij seil\%2fx1 firmware 4.30 • iij seil\/x1 • iij seil\%2fb1 firmware 1.00 • iij seil\%2fb1 firmware 4.30 • iij seil\/b1 • iij seil\%2fx2 firmware 1.00 • iij seil\%2fx2 firmware 4.30 • iij seil\/x2 • iij seil\%2fx86 firmware 1.00 • iij seil\%2fx86 firmware 2.80 • iij seil\/x86 • iij seil\%2fturbo firmware 1.80 • iij seil\%2fturbo firmware 2.05 • iij seil\%2fturbo firmware 2.15 • iij seil\/turbo • iij seil\%2fneu 2fe plus firmware 1.80 • iij seil\%2fneu 2fe plus firmware 2.05 • iij seil\%2fneu 2fe plus firmware 2.15 • iij seil\/neu 2fe plus

Related

Weakness · not in database (1)

References