PT-2015-3207

CVE-2015-7279

·

تاريخ النشر

2015-12-31

·

تاريخ التحديث

2016-11-28

الوصف من

CVSS 2.0
5.0
متوسطة
المقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11
Description The issue is related to the use of an improper algorithm for selecting the ID value in the header of a DNS query. This makes it easier for remote attackers to spoof responses by predicting this value.
Recommendations For Amped Wireless R10000 version 2.5.2.11, consider updating the firmware to a version that uses a proper algorithm for selecting the ID value in DNS queries, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾