VulnerabilityModified

CVE-2011-0454

HIGH 8.3EPSS 2.61%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with firmware 1.80 through 2.10 might allow remote attackers to execute arbitrary code via a PPPoE packet.

CVSS 2.0: 8.3 HIGHAV:A/AC:L/Au:N/C:C/I:C/A:C
EPSS: 2.61% probability · 85th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-119
Affected: iij/seil\/b1 firmware · iij/seil\/b1 · iij/seil\/x1 firmware · iij/seil\/x1 · iij/seil\/x2 firmware · iij/seil\/x2 · iij/seil\/x86 firmware · iij/seil\/x86 · iij/seil\/turbo firmware · iij/seil\/turbo · iij/seil\/neu 2fe plus firmware · iij/seil\/neu 2fe plus
Source: vultures@jpcert.or.jp

EPSS trend

EPSS 2.6% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.