CVE:CVE-2013-4708
CNNVD:CNNVD-201309-504
SEIL/x86等都是日本Internet Initiative Japan公司的路由器设备。
Internet Initiative Japan Inc. SEIL/x86中的PPP Access Concentrator (PPPAC)中存在安全漏洞，该漏洞源于程序产生可预测随机数。远程攻击者可通过嗅探RADIUS流量利用该漏洞绕过RADIUS身份认证。以下版本受到影响：Internet Initiative Japan Inc. SEIL/x86 1.00至2.80版本，SEIL/X1 1.00至4.30版本，SEIL/X2 1.00至4.30版本，SEIL/B1 1.00至4.30版本，SEIL/Turbo 1.80至2.15版本，以及SEIL/neu 2FE Plus 1.80至2.15版本。
solution:Upgrade iij seil%2fx1_firmware to a higher version than 1.00,4.30,and avoid the version 1.00,4.30; Upgrade iij seil/x1 to a higher version than *; Upgrade iij seil%2fb1_firmware to a higher version than 1.00,4.30,and avoid the version 1.00,4.30; Upgrade iij seil/b1 to a higher version than *; Upgrade iij seil%2fx2_firmware to a higher version than 1.00,4.30,and avoid the version 1.00,4.30; Upgrade iij seil/x2 to a higher version than *; Upgrade iij seil%2fx86_firmware to a higher version than 1.00,2.80,and avoid the version 1.00,2.80; Upgrade iij seil/x86 to a higher version than *; Upgrade iij seil%2fturbo_firmware to a higher version than 1.80,2.05,2.15,and avoid the version 1.80,2.05,2.15; Upgrade iij seil/turbo to a higher version than *; Upgrade iij seil%2fneu_2fe_plus_firmware to a higher version than 1.80,2.05,2.15,and avoid the version 1.80,2.05,2.15; Upgrade iij seil/neu_2fe_plus to a higher version than *