PT-2015-7759

CVE-2015-8263

·

Published

2015-12-27

·

Updated

2016-11-28

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions NETGEAR WNR1000v3 version 1.0.2.68
Description The issue makes it easier for remote attackers to spoof DNS responses by using the same source port number for every DNS query.
Recommendations For NETGEAR WNR1000v3 version 1.0.2.68, consider updating the firmware to a version that does not use the same source port number for every DNS query as a permanent solution. As a temporary workaround, restrict access to DNS queries to minimize the risk of exploitation.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾