CVE-2013-4708 - CVE House
Back to Database
Status published Medium CVE-2013-4708

The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc....

Vulnerability Description

The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4708

Credits & Attribution

No credits recorded in the NVD database.

References

More from iij

View All →
CVE-2015-0887
npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86...
High 7.1
CVE-2014-7256
The (1) PPP Access Concentrator (PPPAC) and (2) Dial-Up Networking...
High 7.8
CVE-2014-7255
Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through...
High 7.5
CVE-2014-2004
The PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 routers 1.00...
Medium 5
CVE-2013-4709
Buffer overflow in the PPP Access Concentrator (PPPAC) on the...
Medium 6.8

Affected Vendor

Affected Software

seil\%2fx1 firmware, seil\/x1, seil\%2fb1 firmware, seil\/b1, seil\%2fx2 firmware, seil\/x2, seil\%2fx86 firmware, seil\/x86, seil\%2fturbo firmware, seil\/turbo, seil\%2fneu 2fe plus firmware, seil\/neu 2fe plus
Vulnerable Versions:
1.00, 4.30, 2.80, 1.80, 2.05, 2.15

Timeline

Official Publish: October 1st, 2013
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.