Vulnerabilities > IIJ

DATE CVE VULNERABILITY TITLE RISK
2009-12-23 CVE-2009-4409 Improper Authentication vulnerability in IIJ Seil/B1
The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack.
network
high complexity
iij CWE-287
2.6
2009-12-10 CVE-2009-4293 Configuration vulnerability in IIJ products
Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service (system restart) via crafted GRE packets.
network
iij CWE-16
7.1
2009-12-10 CVE-2009-4292 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IIJ products
Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors.
network
iij CWE-119
critical
9.3