Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2009-4292

24
FAUCET Score

CVE-2009-4292 describes a critical buffer overflow vulnerability within the URL filtering function of Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware versions 2.40 through 2.51. This flaw allows remote attackers to execute arbitrary code with high impact on confidentiality, integrity, and availability, as reflected by its CVSS score of 9.3. While the attack complexity is medium, no public exploit code, Metasploit modules, or Nuclei templates are currently available. Furthermore, there is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
2.40CPE matchmatch criteria
cpe:2.3:a:iij:seil\/x1_firmware:2.40:*:*:*:*:*:*:*
2.41CPE matchmatch criteria
cpe:2.3:a:iij:seil\/x1_firmware:2.41:*:*:*:*:*:*:*
2.42CPE matchmatch criteria
cpe:2.3:a:iij:seil\/x1_firmware:2.42:*:*:*:*:*:*:*
2.50CPE matchmatch criteria
cpe:2.3:a:iij:seil\/x1_firmware:2.50:*:*:*:*:*:*:*
2.51CPE matchmatch criteria
cpe:2.3:a:iij:seil\/x1_firmware:2.51:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.3HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
4.76%
Probability of exploitation in next 30 days
EPSS Percentile
90.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0476 is in the 57th percentile among its peer group of 8,914 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

jvndb.jvn.jp / en/contents/2009/JVNDB-2009-000069.html
jvn.jp / en/jp/JVN06362164/index.html
osvdb.org / 59362
secunia.com / advisories/37154
Vendor Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/54051
seil.jp / seilseries/security/2009/a00669.php
Vendor Advisory
vupen.com / english/advisories/2009/3111
Vendor Advisory