JVNDB-2012-000059

SEIL series fail to restrict access permissions

SEIL series contain an issue where access permissions are not restricted.

SEIL series are wireless LAN routers. SEIL series contain an issue where access permissions are not restricted.

Base Metrics: 5.0 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: Partial
• Availability Impact: None

Internet Initiative Japan Inc.

• SEIL/x86 firmware 1.00 to 2.35
• SEIL/B1 firmware 2.30 to 3.75
• SEIL/X1 firmware 2.30 to 3.75
• SEIL/X2 firmware 2.30 to 3.75

An attacker that can access the product's HTTP proxy may bypass restrictions such as the URL filter.

[Update the Software]
Update to the latest version of the firmware provided by the developer.

Internet Initiative Japan Inc.

• IIJ : Internet Initiative Japan Inc. website (Japanese Only)

1. Permissions(CWE-264) [IPA Evaluation]

1. CVE-2012-2632

1. JVN : JVN#24646833
2. National Vulnerability Database (NVD) : CVE-2012-2632

[2012/06/06]
  Web page was published