PT-2015-7759 · NetGear · Netgear Wnr1000V3

Joel Land · Published 2015-12-27 · Updated 2016-11-28 · CVE-2015-8263

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR WNR1000v3 version 1.0.2.68

Description The issue makes it easier for remote attackers to spoof DNS responses by using the same source port number for every DNS query.

Recommendations For NETGEAR WNR1000v3 version 1.0.2.68, consider updating the firmware to a version that does not use the same source port number for every DNS query as a permanent solution. As a temporary workaround, restrict access to DNS queries to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2015-8263

Affected Products

Netgear Wnr1000V3

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-8263 · Security Note
• http://securityfocus.com/bid/78873 · Note
• https://kb.cert.org/vuls/id/403568 · Note