CVE-2014-7255 Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause....
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause a denial of service (CPU and traffic consumption) via a large number of NTP requests within a short time, which causes unnecessary NTP responses to be sent.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iij seil b1 firmware | >= 2.50, <= 4.62 | No fix listed |
| iij seil x2 firmware | >= 2.50, <= 4.62 | No fix listed |
| iij seil x1 firmware | >= 2.50, <= 4.62 | No fix listed |
| iij seil x86 fuji firmware | >= 1.70, <= 3.22 | No fix listed |
References
- JVN#21907573 third-party-advisory
- JVNDB-2014-000135 third-party-advisory vdb-entry
- www.seil.jp vendor-advisory