SEIL Series Routers CVE-2014-7255 Remote Denial of Service Vulnerability

Bugtraq ID:	71376
Class:	Design Error
CVE:	CVE-2014-7255
Remote:	Yes
Local:	No
Published:	Dec 01 2014 12:00AM
Updated:	Dec 01 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	SEIL SEIL/X2 3.75 SEIL SEIL/X2 3.12 SEIL SEIL/X2 3.11 SEIL SEIL/X2 2.52 SEIL SEIL/X2 2.51 SEIL SEIL/X2 2.50 SEIL SEIL/X1 3.75 SEIL SEIL/X1 3.12 SEIL SEIL/X1 3.11 SEIL SEIL/X1 2.52 SEIL SEIL/X1 2.51 SEIL SEIL/X1 2.50 SEIL SEIL/B1 3.75 SEIL SEIL/B1 3.12 SEIL SEIL/B1 3.11 SEIL SEIL/B1 2.60 SEIL SEIL/B1 2.52 SEIL SEIL/B1 2.51 SEIL SEIL/B1 2.50
Not Vulnerable:

SEIL Series Routers CVE-2014-7255 Remote Denial of Service Vulnerability

SEIL Series Routers are prone to a remote denial-of-service vulnerability.

An attacker can leverage this issue to consume resources resulting in denial-of-service condition; denying service to legitimate users.

The following products are vulnerable:

SEIL/X1 versions 2.50 through 4.62
SEIL/X2 versions 2.50 through 4.62
SEIL/B1 versions 2.50 through 4.62
SEIL/x86 Fuji versions 1.70 through 3.22

SEIL Series Routers CVE-2014-7255 Remote Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

SEIL Series Routers CVE-2014-7255 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SEIL Series Routers CVE-2014-7255 Remote Denial of Service Vulnerability

References:

• SEIL Homepage (Internet Initiative)
  
• JVN#21907573 SEIL Series routers vulnerable to denial-of-service (DoS) (JPCERT)