PT-2015-5972 · Securifi · Securifi Almond+1
Joel Land
·
Published
2015-09-21
·
Updated
2015-09-30
·
CVE-2015-2914
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Securifi Almond devices with firmware prior to AL1-R201EXP10-L304-W34
Securifi Almond-2015 devices with firmware prior to AL2-R088M
Description
The issue allows remote attackers to spoof responses by using a fixed source-port number in outbound DNS queries. This makes it easier for attackers to intercept and manipulate DNS responses.
Recommendations
For Securifi Almond devices with firmware prior to AL1-R201EXP10-L304-W34, update the firmware to AL1-R201EXP10-L304-W34 or later.
For Securifi Almond-2015 devices with firmware prior to AL2-R088M, update the firmware to AL2-R088M or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Securifi Almond
Securifi Almond-2015