JVN#21907573: SEIL Series routers vulnerable to denial-of-service (DoS)

SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing NTP requests.

Impact

By receiving a large volume of NTP request in a short time, the device might continue sending response packets. As a result, the device’s resource may be consumed or the device may be exploited in a DDoS attack.

Solution

Update the Firmware
Apply the appropriate firmware update provided by the developer.

Products Affected

• SEIL/X1 2.50 to 4.62
• SEIL/X2 2.50 to 4.62
• SEIL/B1 2.50 to 4.62
• SEIL/x86 Fuji 1.70 to 3.22