I-O DATA SEIL Router DoS Vulnerability Advisory (CVE-2014-7256)

Key Information Vulnerability ID: JVNDB-2014-000136 Title: Denial of Service (DoS) Vulnerability in SEIL Series Routers Summary: - The PPP Access Concentrator (PPPAC) function and dial-up network functionality in the SEIL Series routers provided by Internet Initiative Japan Co., Ltd. contain a Denial of Service (DoS) vulnerability (CWE-119) during specific packet processing. - This vulnerability is distinct from the issue reported in JVN#21907573. CVSS v2 Severity: - Base Score: 5.0 (Warning) [IPA Score] - Attack Complexity: Low - Authentication Required: None - Confidentiality Impact (C): None - Integrity Impact (I): None - Availability Impact (A): Partial Affected Systems: - SEIL /B1 1.00 ~ 4.62 - SEIL /neu 2FE Plus 1.82 ~ 2.18 - SEIL /Turbo 1.82 ~ 2.18 - SEIL /X1 1.00 ~ 4.62 - SEIL /X2 1.00 ~ 4.62 - SEIL /x86 Fuji 1.00 ~ 3.22 Expected Impact: - Receiving specially crafted packets may cause the product to reboot. Countermeasures: - [Firmware Update] - The vendor will provide information and firmware updates. Vendor Information: - SEIL Series Security & Vulnerability Information: Announcement page by Internet Initiative Japan Co., Ltd. CWE Vulnerability Type: - 1. Buffer Overflow (CWE-119) [IPA Assessment] Common Vulnerabilities and Exposures (CVE): - 1. CVE-2014-7256 Reference Information: - 1. JVN: JVN#04895240 - 2. National Vulnerability Database (NVD): CVE-2014-7256 Update History: - [December 1, 2014] Initial release - [December 9, 2014] Reference information added: National Vulnerability Database (NVD) (CVE-2014-7256)

Goal Reached Thanks to every supporter — we hit 100%!

I-O DATA SEIL Router DoS Vulnerability Advisory (CVE-2014-7256)