PT-2016-3872

CVE-2015-8265

·

Publicado

2016-02-01

·

Atualizado

2016-11-28

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Huawei Mobile WiFi E5151 versions before E5151s-2TCPU-V200R001B146D27SP00C00 Huawei Mobile WiFi E5186 versions before V200R001B310D01SP00C00
Description The issue allows remote attackers to spoof responses via unspecified vectors, making it easier to launch attacks by utilizing DNS query packets with a static source port.
Recommendations For Huawei Mobile WiFi E5151 versions before E5151s-2TCPU-V200R001B146D27SP00C00, update to version E5151s-2TCPU-V200R001B146D27SP00C00 or later. For Huawei Mobile WiFi E5186 versions before V200R001B310D01SP00C00, update to version V200R001B310D01SP00C00 or later.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-20: Improper Input Validation
Identificadores relacionados
CVE-2015-8265
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com