Vulnerability Details : CVE-2017-10856
SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet.
Products affected by CVE-2017-10856
- cpe:2.3:o:seil:b1_firmware:4.60:*:*:*:*:*:*:*
- cpe:2.3:o:seil:b1_firmware:5.72:*:*:*:*:*:*:*
- cpe:2.3:o:seil:x86_fuji_firmware:3.20:*:*:*:*:*:*:*
- cpe:2.3:o:seil:x86_fuji_firmware:5.72:*:*:*:*:*:*:*
- cpe:2.3:o:seil:bpv_4_firmware:5.72:*:*:*:*:*:*:*
- cpe:2.3:o:seil:bpv_4_firmware:5.00:*:*:*:*:*:*:*
- cpe:2.3:o:seil:x1_firmware:4.60:*:*:*:*:*:*:*
- cpe:2.3:o:seil:x1_firmware:5.72:*:*:*:*:*:*:*
- cpe:2.3:o:seil:x2_firmware:4.60:*:*:*:*:*:*:*
- cpe:2.3:o:seil:x2_firmware:5.72:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-10856
0.74%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 71 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-10856
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST | |
|
3.7
|
LOW | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
2.2
|
1.4
|
NIST |
References for CVE-2017-10856
-
http://www.seil.jp/support/security/a01811.html
特定のIKEパケットの受信によりIPsecインタフェースでの通信ができなくなる脆弱性Vendor Advisory
-
https://jvn.jp/en/jp/JVN76692689/index.html
JVN#76692689: SEIL Series routers vulnerable to denial-of-service (DoS)Third Party Advisory;VDB Entry
Jump to