CVE Daily

CVE-2009-4409

The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Co...

Low CVSS 2.6

Overview

The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack.

CWE: CWE-287 Published: 2009-12-23T21:30:00.313
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 2.6 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags