PT-2015-3207 · Amped Wireless · Amped Wireless R10000

Joel Land · Publicado 2015-12-31 · Atualizado 2016-11-28 · CVE-2015-7279

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11

Description The issue is related to the use of an improper algorithm for selecting the ID value in the header of a DNS query. This makes it easier for remote attackers to spoof responses by predicting this value.

Recommendations For Amped Wireless R10000 version 2.5.2.11, consider updating the firmware to a version that uses a proper algorithm for selecting the ID value in DNS queries, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-331

Identificadores relacionados

BDU:2016-00927

CVE-2015-7279

Produtos afetados

Amped Wireless R10000

Referências · 4

• http://securityfocus.com/bid/78818 · Nota
• https://bdu.fstec.ru/vul/2016-00927 · Nota de Segurança
• https://kb.cert.org/vuls/id/763576 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7279 · Nota de Segurança