CVE-2013-4708
4.0
Vector
AV:N/AC:H/Au:N/C:P/I:P/A:N
Exploitability: 4.9 / Impact: 4.9
Source: NVD
Description
The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.
Affected (20)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.00 | |
| All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.00 | |
| All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.00 | |
| All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.00 | |
| All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.80 | |
| All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.80 | |
| All versions |
Related CWEs
References (8)
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.