PT-2015-5972 · Securifi · Securifi Almond+1

Joel Land · Publicado 2015-09-21 · Atualizado 2015-09-30 · CVE-2015-2914

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Securifi Almond devices with firmware prior to AL1-R201EXP10-L304-W34 Securifi Almond-2015 devices with firmware prior to AL2-R088M

Description The issue allows remote attackers to spoof responses by using a fixed source-port number in outbound DNS queries. This makes it easier for attackers to intercept and manipulate DNS responses.

Recommendations For Securifi Almond devices with firmware prior to AL1-R201EXP10-L304-W34, update the firmware to AL1-R201EXP10-L304-W34 or later. For Securifi Almond-2015 devices with firmware prior to AL2-R088M, update the firmware to AL2-R088M or later.

Correção

Identificadores relacionados

CVE-2015-2914

Produtos afetados

Securifi Almond

Securifi Almond-2015

Referências · 2

• http://kb.cert.org/vuls/id/906576 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2015-2914 · Nota de Segurança