low2.6
CVE-2012-2632
SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy…
Impact
SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seil | B1 | Versions 2.30, 2.40, 2.41, 2.42, 2.50, 2.51 |
| Seil | X1 | Versions 2.30, 2.40, 2.41, 2.42, 2.50, 2.51 |
| Seil | X2 | Versions 2.30, 2.40, 2.41, 2.42, 2.50, 2.51 |
| Seil | B1 Firmware | Versions 2.30, 2.40, 2.41, 2.42, 2.50, 2.51 |
| Seil | X86 Firmware | Versions 1.00, 1.61 |