IIJ SEIL IPv6 Unicast RPF Bypass Vulnerability (CVE-2010-2366)

Vulnerability Key Information Vulnerability ID: JVND-2010-000032 Vulnerability Name: SEIL/X Series and SEIL/B1 IPv6 Unicast RPF vulnerability Summary: A vulnerability exists in SEIL/X Series and SEIL/B1, where IPv6 Unicast Reverse Path Forwarding (RPF) does not function properly in strict mode. CVSS Severity CVSS V2 Base Score: 4.3 (Medium) Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None Affected Products Manufacturer: Internet Initiative Japan Inc. Affected Devices and Versions: - SEIL/B1 firmware 1.00 to 2.73 - SEIL/X1 firmware 1.00 to 2.73 - SEIL/X2 firmware 1.00 to 2.73 Impact Packets that should be dropped (e.g., when IP addresses are spoofed) may be forwarded without being dropped. Solution Update software to the latest version, as per the vendor's instructions. Configure packet filters; using the command can mitigate this vulnerability. Vendor Information Internet Initiative Japan Inc. Vendor Link: [a00875] (Japanese) CWE No Mapping (CWE-Other) CVE [CVE-2010-2366] References JVN: [JV#12683004] National Vulnerability Database (NVD): [CVE-2010-2366] Revision History 2010/08/25: Page published First Public Disclosure Date: 2010/08/25 Last Updated Date: 2010/08/25

Goal Reached Thanks to every supporter — we hit 100%!

IIJ SEIL IPv6 Unicast RPF Bypass Vulnerability (CVE-2010-2366)