medium5.8
CVE-2010-2363
The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is…
Impact
The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iij | Seil\/X1 Firmware | Versions 1.10, 1.11, 1.20, 1.21, 1.22, 1.30 |
| Iij | Seil\/X2 Firmware | Versions 1.00, 1.10, 1.11, 1.20, 1.21, 1.22 |
| Iij | Seil\/B1 Firmware | Versions 1.00, 2.01, 2.10, 2.20, 2.30, 2.40 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN12683004/index.html
- http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html
- http://secunia.com/advisories/41088
- http://www.seil.jp/seilseries/security/2010/a00875.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61382
- http://jvn.jp/en/jp/JVN12683004/index.html
- http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html
- http://secunia.com/advisories/41088
- http://www.seil.jp/seilseries/security/2010/a00875.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61382