CVE:CVE-2012-2632
CNNVD:CNNVD-201206-074
SEIL路由器是日本的SEIL厂商出的路由器。
SEIL路由器中存在安全绕过漏洞，该漏洞源于HTTP-Proxy/Gateway功能中的一个错误。攻击者可利用该漏洞借助特制HTTP请求，导致例如绕过URL过滤器。成功的攻击需要设置HTTP代理和启用“应用网关”。以下产品和版本中存在该漏洞：SEIL/x86 firmware 1.00至2.35版本，SEIL/X1 firmware 2.30至3.75版本，SEIL/X2 firmware 2.30至3.75版本，SEIL/B1 firmware 2.30至3.75版本。
solution:Upgrade seil b1 to a higher version than 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75,and avoid the version 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75; Upgrade seil x1 to a higher version than 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75,and avoid the version 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75; Upgrade seil x2 to a higher version than 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75,and avoid the version 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75; Upgrade seil b1_firmware to a higher version than 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75,and avoid the version 2.30,2.40,2.41,2.42,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.70,2.72,2.73,2.74,2.75,3.01,3.02,3.10,3.11,3.12,3.13,3.20,3.21,3.30,3.31,3.40,3.41,3.50,3.51,3.60,3.70,3.71,3.75; Upgrade seil x86_firmware to a higher version than 1.00,1.61,and avoid the version 1.00,1.61