Sign-up

ID

VAR-201406-0099


CVE

CVE-2014-2004


TITLE

SEIL Series routers vulnerable to denial-of-service (DoS)

Trust: 0.8

sources: JVNDB: JVNDB-2014-000055

DESCRIPTION

The PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 routers 1.00 through 3.10, SEIL/X1 routers 1.00 through 4.50, SEIL/X2 routers 1.00 through 4.50, SEIL/B1 routers 1.00 through 4.50, SEIL/Turbo routers 1.80 through 2.17, and SEIL/neu 2FE Plus routers 1.80 through 2.17 allows remote attackers to cause a denial of service (session termination or concentrator outage) via a crafted TCP packet. The PPP Access Concentrator (PPPAC) in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service (DoS) vulnerability due to an issue in processing certain packets. (CWE-119)By receiving a specially crafted TCP packet, a session established using PPPAC may be disconnected or stop accepting connections. SEIL is a series of router devices. SEIL Series Routers are prone to a remote denial-of-service vulnerability. An attacker can leverage this issue to cause denial-of-service conditions; denying service to legitimate users. The following are vulnerable: SEIL/x86 1.00 to 3.10 SEIL/X1 1.00 to 4.50 SEIL/X2 1.00 to 4.50 SEIL/B1 1.00 to 4.50 SEIL/Turbo 1.80 to 2.17 SEIL/neu 2FE Plus 1.80 to 2.17. The following router products are affected: SEIL SEIL/x86 Routers Versions 1.00 to 3.10, SEIL/X1 Routers Versions 1.00 to 4.50, SEIL/X2 Routers Versions 1.00 to 4.50, SEIL/B1 Routers Versions 1.00 to 4.50, SEIL/Turbo Routers 1.80 to 2.17 Version, SEIL/neu 2FE Plus router version 1.80 to 2.17

Trust: 2.52

sources: NVD: CVE-2014-2004 // JVNDB: JVNDB-2014-000055 // CNVD: CNVD-2014-03732 // BID: 68041 // VULHUB: VHN-69943

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2014-03732

AFFECTED PRODUCTS

vendor:iijmodel:seil\%2fx86scope:eqversion:2.82

Trust: 1.6

vendor:iijmodel:seil\%2fneu 2fe plusscope:eqversion:2.17

Trust: 1.6

vendor:iijmodel:seil\%2fturboscope:eqversion:2.15

Trust: 1.6

vendor:iijmodel:seil\%2fx86scope:eqversion:3.10

Trust: 1.6

vendor:iijmodel:seil\%2fneu 2fe plusscope:eqversion:2.16

Trust: 1.6

vendor:iijmodel:seil\%2fx86scope:eqversion:2.81

Trust: 1.6

vendor:iijmodel:seil\%2fneu 2fe plusscope:eqversion:1.80

Trust: 1.6

vendor:iijmodel:seil\%2fneu 2fe plusscope:eqversion:2.05

Trust: 1.6

vendor:iijmodel:seil\%2fturboscope:eqversion:2.05

Trust: 1.6

vendor:iijmodel:seil\%2fneu 2fe plusscope:eqversion:2.15

Trust: 1.6

vendor:iijmodel:seil\%2fx2scope:eqversion:1.80

Trust: 1.0

vendor:iijmodel:seil\%2fturboscope:eqversion:2.16

Trust: 1.0

vendor:iijmodel:seil\%2fx1scope:eqversion:1.00

Trust: 1.0

vendor:iijmodel:seil\%2fx1scope:eqversion:4.31

Trust: 1.0

vendor:iijmodel:seil\/x1scope:eqversion:*

Trust: 1.0

vendor:iijmodel:seil\%2fx86scope:eqversion:2.80

Trust: 1.0

vendor:iijmodel:seil\%2fx1scope:eqversion:4.30

Trust: 1.0

vendor:iijmodel:seil\%2fturboscope:eqversion:1.80

Trust: 1.0

vendor:iijmodel:seil\%2fx2scope:eqversion:1.00

Trust: 1.0

vendor:iijmodel:seil\/x2scope:eqversion:*

Trust: 1.0

vendor:iijmodel:seil\%2fx2scope:eqversion:4.30

Trust: 1.0

vendor:iijmodel:seil\%2fx86scope:eqversion:1.00

Trust: 1.0

vendor:iijmodel:seil\%2fx2scope:eqversion:4.50

Trust: 1.0

vendor:iijmodel:seil\%2fb1scope:eqversion:4.32

Trust: 1.0

vendor:iijmodel:seil\/turboscope:eqversion:*

Trust: 1.0

vendor:iijmodel:seil\%2fx1scope:eqversion:4.32

Trust: 1.0

vendor:iijmodel:seil\%2fb1scope:eqversion:4.31

Trust: 1.0

vendor:iijmodel:seil\%2fb1scope:eqversion:1.00

Trust: 1.0

vendor:iijmodel:seil\%2fb1scope:eqversion:4.50

Trust: 1.0

vendor:iijmodel:seil\%2fturboscope:eqversion:2.17

Trust: 1.0

vendor:iijmodel:seil\%2fb1scope:eqversion:4.30

Trust: 1.0

vendor:iijmodel:seil\/b1scope:eqversion:*

Trust: 1.0

vendor:iijmodel:seil\/x86scope:eqversion:*

Trust: 1.0

vendor:iijmodel:seil\/neu 2fe plusscope:eqversion:*

Trust: 1.0

vendor:internet initiativemodel:seil/b1scope: - version: -

Trust: 0.8

vendor:internet initiativemodel:seil/b1scope:eqversion:1.00 to 4.50

Trust: 0.8

vendor:internet initiativemodel:seil/neu 2fe plusscope: - version: -

Trust: 0.8

vendor:internet initiativemodel:seil/neu 2fe plusscope:eqversion:1.80 to 2.17

Trust: 0.8

vendor:internet initiativemodel:seil/turboscope: - version: -

Trust: 0.8

vendor:internet initiativemodel:seil/turboscope:eqversion:1.80 to 2.17

Trust: 0.8

vendor:internet initiativemodel:seil/x1scope: - version: -

Trust: 0.8

vendor:internet initiativemodel:seil/x1scope:eqversion:1.00 to 4.50

Trust: 0.8

vendor:internet initiativemodel:seil/x2scope: - version: -

Trust: 0.8

vendor:internet initiativemodel:seil/x2scope:eqversion:1.00 to 4.50

Trust: 0.8

vendor:internet initiativemodel:seil/x86scope: - version: -

Trust: 0.8

vendor:internet initiativemodel:seil/x86scope:eqversion:1.00 to 3.10

Trust: 0.8

vendor:internet initiativemodel:seil/neu 2fe plus toscope:eqversion:1.802.17

Trust: 0.6

vendor:internet initiativemodel:seil/turbo toscope:eqversion:1.802.17

Trust: 0.6

vendor:internet initiativemodel:seil/b1 toscope:eqversion:1.004.50

Trust: 0.6

vendor:internet initiativemodel:seil/x2 toscope:eqversion:1.004.50

Trust: 0.6

vendor:internet initiativemodel:seil/x1 toscope:eqversion:1.004.50

Trust: 0.6

vendor:internet initiativemodel:seil/x86 toscope:eqversion:1.003.10

Trust: 0.6

vendor:seilmodel:seil/x86scope:eqversion:2.35

Trust: 0.3

vendor:seilmodel:seil/x86scope:eqversion:1.61

Trust: 0.3

vendor:seilmodel:seil/x86scope:eqversion:1.00

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:3.75

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:3.12

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:3.11

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.52

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.51

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.50

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.49

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.48

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.47

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.46

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.45

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.44

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.43

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.42

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.41

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.40

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:2.30

Trust: 0.3

vendor:seilmodel:seil/x2scope:eqversion:1.00

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:3.75

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:3.12

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:3.11

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.52

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.51

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.50

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.49

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.48

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.47

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.46

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.45

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.44

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.43

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.42

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.41

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.40

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:2.30

Trust: 0.3

vendor:seilmodel:seil/x1scope:eqversion:1.00

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:3.75

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:3.12

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:3.11

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:2.60

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:2.52

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:2.51

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:2.50

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:2.48

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:2.30

Trust: 0.3

vendor:seilmodel:seil/b1scope:eqversion:1.00

Trust: 0.3

sources: CNVD: CNVD-2014-03732 // BID: 68041 // JVNDB: JVNDB-2014-000055 // CNNVD: CNNVD-201406-323 // NVD: CVE-2014-2004

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-2004
value: MEDIUM

Trust: 1.0

IPA: JVNDB-2014-000055
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2014-03732
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201406-323
value: MEDIUM

Trust: 0.6

VULHUB: VHN-69943
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2014-2004
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

IPA: JVNDB-2014-000055
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2014-03732
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-69943
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2014-03732 // VULHUB: VHN-69943 // JVNDB: JVNDB-2014-000055 // CNNVD: CNNVD-201406-323 // NVD: CVE-2014-2004

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-69943 // JVNDB: JVNDB-2014-000055 // NVD: CVE-2014-2004

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201406-323

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201406-323

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-000055

PATCH
title:Internet Initiative Japan Inc. websiteurl:http://www.seil.jp/support/security/a01443.html
Trust: 0.8
title:SEIL Series Routers patch for remote denial of service vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/46479
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2014-03732 // 
            
            
            
            JVNDB: JVNDB-2014-000055

EXTERNAL IDS
db:NVDid:CVE-2014-2004
Trust: 3.4
db:JVNDBid:JVNDB-2014-000055
Trust: 2.5
db:JVNid:JVN10724763
Trust: 2.5
db:BIDid:68041
Trust: 1.0
db:CNNVDid:CNNVD-201406-323
Trust: 0.7
db:CNVDid:CNVD-2014-03732
Trust: 0.6
db:VULHUBid:VHN-69943
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2014-03732 // 
            
            
            
            VULHUB: VHN-69943 // 
            
            
            
            BID: 68041 // 
            
            
            
            JVNDB: JVNDB-2014-000055 // 
            
            
            
            CNNVD: CNNVD-201406-323 // 
            
            
            
            NVD: CVE-2014-2004

REFERENCES
url:http://jvn.jp/en/jp/jvn10724763/index.html
Trust: 2.5
url:http://www.seil.jp/support/security/a01443.html
Trust: 1.7
url:http://jvndb.jvn.jp/jvndb/jvndb-2014-000055
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2004
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-2004
Trust: 0.8
url:http://www.securityfocus.com/bid/68041
Trust: 0.6
url:http://www.seil.jp/
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2014-03732 // 
            
            
            
            VULHUB: VHN-69943 // 
            
            
            
            BID: 68041 // 
            
            
            
            JVNDB: JVNDB-2014-000055 // 
            
            
            
            CNNVD: CNNVD-201406-323 // 
            
            
            
            NVD: CVE-2014-2004

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 68041

SOURCES
db:CNVDid:CNVD-2014-03732
db:VULHUBid:VHN-69943
db:BIDid:68041
db:JVNDBid:JVNDB-2014-000055
db:CNNVDid:CNNVD-201406-323
db:NVDid:CVE-2014-2004

LAST UPDATE DATE
2025-04-13T23:21:26.353000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2014-03732date:2014-06-18T00:00:00
db:VULHUBid:VHN-69943date:2014-06-16T00:00:00
db:BIDid:68041date:2014-06-13T00:00:00
db:JVNDBid:JVNDB-2014-000055date:2014-06-17T00:00:00
db:CNNVDid:CNNVD-201406-323date:2014-06-17T00:00:00
db:NVDid:CVE-2014-2004date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:CNVDid:CNVD-2014-03732date:2014-06-18T00:00:00
db:VULHUBid:VHN-69943date:2014-06-16T00:00:00
db:BIDid:68041date:2014-06-13T00:00:00
db:JVNDBid:JVNDB-2014-000055date:2014-06-13T00:00:00
db:CNNVDid:CNNVD-201406-323date:2014-06-17T00:00:00
db:NVDid:CVE-2014-2004date:2014-06-16T14:55:05.893