PT-2015-3207

CVE-2015-7279

·

Publicado

2015-12-31

·

Atualizado

2016-11-28

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11
Description The issue is related to the use of an improper algorithm for selecting the ID value in the header of a DNS query. This makes it easier for remote attackers to spoof responses by predicting this value.
Recommendations For Amped Wireless R10000 version 2.5.2.11, consider updating the firmware to a version that uses a proper algorithm for selecting the ID value in DNS queries, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾