CVE-2015-0887

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-28 · updated 2026-06-17
Weakness: CWE-399

Description

npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 routers 3.50 through 4.70, and SEIL/B1 routers 3.50 through 4.70 allows remote attackers to cause a denial of service (infinite loop and device hang) via a crafted SSTP packet.

Affected products

Iij Seil/B1: all versions
Iij Seil/B1 Firmware: 3.51, 3.60, 3.70, 3.75, 3.90, 3.91 (+10)
Iij Seil/X1 Firmware: 3.51, 3.60, 3.70, 3.75, 3.90, 3.91 (+10)
Iij Seil/X2 Firmware: 3.51, 3.60, 3.70, 3.75, 3.90, 3.91 (+10)
Iij Seil X86 Fuji Firmware: 1.70, 1.71, 1.72, 1.73, 1.74, 1.75 (+147)

References

http://jvn.jp/en/jp/JVN63949115/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000031
http://www.seil.jp/support/security/a01541.html
http://jvn.jp/en/jp/JVN63949115/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000031
http://www.seil.jp/support/security/a01541.html

Get alerted when CVE-2015-0887 or the next vulnerability affects your stack