CVE-2010-2363

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-30 · updated 2026-06-16
Weakness: CWE-264

Description

The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.

Affected products

Iij Seil/B1 Firmware: 1.00, 2.01, 2.10, 2.20, 2.30, 2.40 (+11)
Iij Seil/X1 Firmware: 1.10, 1.11, 1.20, 1.21, 1.22, 1.30 (+22)
Iij Seil/X2 Firmware: 1.00, 1.10, 1.11, 1.20, 1.21, 1.22 (+22)

References

http://jvn.jp/en/jp/JVN12683004/index.html
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html
http://secunia.com/advisories/41088
http://www.seil.jp/seilseries/security/2010/a00875.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/61382
http://jvn.jp/en/jp/JVN12683004/index.html
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html
http://secunia.com/advisories/41088
http://www.seil.jp/seilseries/security/2010/a00875.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/61382

Get alerted when CVE-2010-2363 or the next vulnerability affects your stack