How severe is CVE-2013-4708?

CVE-2013-4708 has a CVSS 2.0 base score of 4.0, rated medium severity.

Is CVE-2013-4708 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-4708?

CVE-2013-4708 primarily affects Iij Seil%2fx1 Firmware. In total, 20 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2013-4708?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2013-4708 published?

CVE-2013-4708 was published on 2013-10-01 and last updated on 2026-06-16.

CVE-2013-4708

CVE-2013-4708 is a medium-severity vulnerability in Iij Seil%2fx1 Firmware with a CVSS 2.0 base score of 4.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-310.

Key facts

Severity: Medium (CVSS 2.0 base score 4.0)
EPSS exploit prediction: 1% (66th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-310
Affected product: Iij Seil%2fx1 Firmware
Published: 2013-10-01
Last modified: 2026-06-16

Description

The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.

Frequently asked questions

What is CVE-2013-4708?: The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows remote attackers to bypass RADIUS authentication by sniffing RADIUS traffic.
How severe is CVE-2013-4708?: CVE-2013-4708 has a CVSS 2.0 base score of 4.0, rated medium severity.
Is CVE-2013-4708 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-4708?: CVE-2013-4708 primarily affects Iij Seil%2fx1 Firmware. In total, 20 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2013-4708?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2013-4708 published?: CVE-2013-4708 was published on 2013-10-01 and last updated on 2026-06-16.

References

Affected products (20)

cpe:2.3:o:iij:seil\%2fx1_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fx1_firmware:4.30:*:*:*:*:*:*:*
cpe:2.3:h:iij:seil\/x1:*:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fb1_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fb1_firmware:4.30:*:*:*:*:*:*:*
cpe:2.3:h:iij:seil\/b1:*:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fx2_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fx2_firmware:4.30:*:*:*:*:*:*:*
cpe:2.3:h:iij:seil\/x2:*:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fx86_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fx86_firmware:2.80:*:*:*:*:*:*:*
cpe:2.3:h:iij:seil\/x86:*:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fturbo_firmware:1.80:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fturbo_firmware:2.05:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fturbo_firmware:2.15:*:*:*:*:*:*:*
cpe:2.3:h:iij:seil\/turbo:*:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fneu_2fe_plus_firmware:1.80:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fneu_2fe_plus_firmware:2.05:*:*:*:*:*:*:*
cpe:2.3:o:iij:seil\%2fneu_2fe_plus_firmware:2.15:*:*:*:*:*:*:*
cpe:2.3:h:iij:seil\/neu_2fe_plus:*:*:*:*:*:*:*:*

More vulnerabilities in Iij Seil%2fx1 Firmware

CVE-2013-4709 — Medium (CVSS 6.8): Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware…
CVE-2014-2004 — Medium (CVSS 5.0): The PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 routers 1.00 through 3.10, SEIL/X1 routers 1.00 through 4.50,…

All CVEs affecting Iij Seil%2fx1 Firmware →

Other CWE-310 (Cryptographic Issues) vulnerabilities

CVE-2014-7878 — Critical (CVSS 10.0): The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived…
CVE-2013-3712 — Critical (CVSS 10.0): SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has…
CVE-2013-6952 — Critical (CVSS 10.0): The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote…
CVE-2013-6838 — Critical (CVSS 10.0): An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000)…
CVE-2013-0137 — Critical (CVSS 10.0): The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189…
CVE-2011-5123 — Critical (CVSS 10.0): The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in…

Browse all CWE-310 (Cryptographic Issues) vulnerabilities →