Lucene search

JpcertCVE-2017-10856

HistorySep 15, 2017 - 5:29 p.m.

CVE-2017-10856

2017-09-1517:29:00

jpcert

web.nvd.nist.gov

cve

seil

remote attackers

encrypted communications

vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.3

Confidence

High

EPSS

0.001

Percentile

49.5%

JSON

SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device’s encrypted communications via a specially crafted packet.

Affected configurations

Nvd

Vulners

Node

seilb1_firmwareMatch4.60

seilb1_firmwareMatch5.72

AND

seilb1Match-

Node

seilbpv_4_firmwareMatch5.00

seilbpv_4_firmwareMatch5.72

AND

seilbpv_4Match-

Node

seilx1_firmwareMatch4.60

seilx1_firmwareMatch5.72

AND

seilx1Match-

Node

seilx2_firmwareMatch4.60

seilx2_firmwareMatch5.72

AND

seilx2Match-

Node

seilx86_fuji_firmwareMatch3.20

seilx86_fuji_firmwareMatch5.72

AND

seilx86_fujiMatch-

VendorProductVersionCPE
seilb1_firmware4.60cpe:2.3:o:seil:b1_firmware:4.60:*:*:*:*:*:*:*
seilb1_firmware5.72cpe:2.3:o:seil:b1_firmware:5.72:*:*:*:*:*:*:*
seilb1-cpe:2.3:h:seil:b1:-:*:*:*:*:*:*:*
seilbpv_4_firmware5.00cpe:2.3:o:seil:bpv_4_firmware:5.00:*:*:*:*:*:*:*
seilbpv_4_firmware5.72cpe:2.3:o:seil:bpv_4_firmware:5.72:*:*:*:*:*:*:*
seilbpv_4-cpe:2.3:h:seil:bpv_4:-:*:*:*:*:*:*:*
seilx1_firmware4.60cpe:2.3:o:seil:x1_firmware:4.60:*:*:*:*:*:*:*
seilx1_firmware5.72cpe:2.3:o:seil:x1_firmware:5.72:*:*:*:*:*:*:*
seilx1-cpe:2.3:h:seil:x1:-:*:*:*:*:*:*:*
seilx2_firmware4.60cpe:2.3:o:seil:x2_firmware:4.60:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
seil	b1_firmware	4.60	cpe:2.3:o:seil:b1_firmware:4.60:::::::*
seil	b1_firmware	5.72	cpe:2.3:o:seil:b1_firmware:5.72:::::::*
seil	b1	-	cpe:2.3:h:seil:b1:-:::::::*
seil	bpv_4_firmware	5.00	cpe:2.3:o:seil:bpv_4_firmware:5.00:::::::*
seil	bpv_4_firmware	5.72	cpe:2.3:o:seil:bpv_4_firmware:5.72:::::::*
seil	bpv_4	-	cpe:2.3:h:seil:bpv_4:-:::::::*
seil	x1_firmware	4.60	cpe:2.3:o:seil:x1_firmware:4.60:::::::*
seil	x1_firmware	5.72	cpe:2.3:o:seil:x1_firmware:5.72:::::::*
seil	x1	-	cpe:2.3:h:seil:x1:-:::::::*
seil	x2_firmware	4.60	cpe:2.3:o:seil:x2_firmware:4.60:::::::*

Rows per page:

1-10 of 151

CNA Affected

[
  {
    "product": "SEIL/X",
    "vendor": "Internet Initiative Japan Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 to 5.72"
      }
    ]
  },
  {
    "product": "SEIL/B1",
    "vendor": "Internet Initiative Japan Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 to 5.72"
      }
    ]
  },
  {
    "product": "SEIL/x86",
    "vendor": "Internet Initiative Japan Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "3.20 to 5.72"
      }
    ]
  },
  {
    "product": "SEIL/BPV4",
    "vendor": "Internet Initiative Japan Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "5.00 to 5.72"
      }
    ]
  }
]

References

www.seil.jp/support/security/a01811.html

jvn.jp/en/jp/JVN76692689/index.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.3

Confidence

High

EPSS

0.001

Percentile

49.5%

JSON

Related for CVE-2017-10856