Description
The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.
References
- seil-ipv6-spoofing(61382) vdb-entry
- JVN#12683004 third-party-advisory
- JVNDB-2010-000032 third-party-advisory
- 41088 third-party-advisory
- http://www.seil.jp/seilseries/security/2010/a00875.php