Lucene search

[email protected]CVE-2015-8262

HistoryDec 27, 2015 - 3:59 a.m.

CVE-2015-8262

2015-12-2703:59:04

[email protected]

web.nvd.nist.gov

buffalo wzr-600dhp2

firmware

dns query

spoofing

cve-2015-8262

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value.

Affected configurations

NVD

Node

buffalotechairstation_extreme_n600_firmwareMatch2.09

buffalotechairstation_extreme_n600_firmwareMatch2.13

buffalotechairstation_extreme_n600_firmwareMatch2.16

AND

buffalotechairstation_extreme_n600

CPENameOperatorVersion
buffalotech:airstation_extreme_n600_firmwarebuffalotech airstation extreme n600 firmwareeq2.09
buffalotech:airstation_extreme_n600_firmwarebuffalotech airstation extreme n600 firmwareeq2.13
buffalotech:airstation_extreme_n600_firmwarebuffalotech airstation extreme n600 firmwareeq2.16
buffalotech:airstation_extreme_n600buffalotech airstation extreme n600eq*

CPE	Name	Operator	Version
buffalotech:airstation_extreme_n600_firmware	buffalotech airstation extreme n600 firmware	eq	2.09
buffalotech:airstation_extreme_n600_firmware	buffalotech airstation extreme n600 firmware	eq	2.13
buffalotech:airstation_extreme_n600_firmware	buffalotech airstation extreme n600 firmware	eq	2.16
buffalotech:airstation_extreme_n600	buffalotech airstation extreme n600	eq	*

References

www.securityfocus.com/bid/78877

www.kb.cert.org/vuls/id/646008

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

Related for CVE-2015-8262

cvelist1 prion1 cert1 nvd1