NetSight
IP …
low2.6

CVE-2009-4409

The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 …

Impact

The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack.

Affected products

VendorProductAffected versions
IijSeil\/B1
Versions 1.00, 2.01, 2.10, 2.20, 2.30, 2.40

Weakness classification

CWE-287

References