Unscored severity · published Jun 15, 2012
CVE-2012-2632
SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and…
–
CVSS
1.2%
EPSS
No
On KEV
Description
SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
B1
B1 · Seil
2.30; 2.40; 2.41; 2.42; 2.50; 2.51; +28 more · source: NVD
BF
B1 Firmware · Seil
2.30; 2.40; 2.41; 2.42; 2.50; 2.51; +28 more · source: NVD
X1
X1 · Seil
2.30; 2.40; 2.41; 2.42; 2.50; 2.51; +28 more · source: NVD
X2
X2 · Seil
2.30; 2.40; 2.41; 2.42; 2.50; 2.51; +28 more · source: NVD
XF
X86 Firmware · Seil
1.00; 1.61 · source: NVD