What is the CVSS score of CVE-2013-4708?

CVE-2013-4708 has a CVSS 2.0 base score of 4.0 (Medium). CVSS vector: AV:N/AC:H/Au:N/C:P/I:P/A:N. EPSS exploitation probability: 0.2%.

Seil 2Fx1 Firmware CVE-2013-4708

MEDIUM

Cryptographic Issues (CWE-310)

2013-10-01 vultures@jpcert.or.jp

Authentication Bypass Seil 2Fx1 Firmware Seil X1 Seil 2Fb1 Firmware Seil B1 Seil 2Fx2 Firmware Seil X2 Seil 2Fx86 Firmware Seil X86 Seil 2Fturbo Firmware Seil Turbo Seil 2Fneu 2Fe Plus Firmware Seil Neu 2Fe Plus

4.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.0 MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:P/I:P/A:N

Attack Vector

Network

Attack Complexity

High

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Oct 01, 2013 - 17:55 cve.org

MEDIUM 4.0

DescriptionCVE.org

The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.

AnalysisAI

The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-310. The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic. Affected products include: Iij Seil\%2Fx1 Firmware, Iij Seil\/X1, Iij Seil\%2Fb1 Firmware, Iij Seil\/B1, Iij Seil\%2Fx2 Firmware. Version information: through 2.80.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.