PT-2015-3207 · Amped Wireless · Amped Wireless R10000

Joel Land · Published 2015-12-31 · Updated 2016-11-28 · CVE-2015-7279

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11

Description The issue is related to the use of an improper algorithm for selecting the ID value in the header of a DNS query. This makes it easier for remote attackers to spoof responses by predicting this value.

Recommendations For Amped Wireless R10000 version 2.5.2.11, consider updating the firmware to a version that uses a proper algorithm for selecting the ID value in DNS queries, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-331

Related Identifiers

BDU:2016-00927

CVE-2015-7279

Affected Products

Amped Wireless R10000

References · 4

• https://bdu.fstec.ru/vul/2016-00927 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-7279 · Security Note
• http://securityfocus.com/bid/78818 · Note
• https://kb.cert.org/vuls/id/763576 · Note