PT-2017-17128
CVE-2017-6520
·
تاريخ النشر
2017-05-01
·
تاريخ التحديث
2017-05-16
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions
BOSE Soundtouch 30 (affected versions not specified)
Description
The issue concerns the Multicast DNS (mDNS) responder in the BOSE Soundtouch 30, which incorrectly responds to IPv4 unicast queries from non-link-local source addresses. This behavior allows remote attackers to potentially cause a denial of service through traffic amplification or obtain sensitive information by sending UDP packets to port 5353.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾