Lucene search

[email protected]CVE-2019-6015

HistoryOct 04, 2019 - 7:15 p.m.

CVE-2019-6015

2019-10-0419:15:10

CWE-400

[email protected]

web.nvd.nist.gov

154

cve-2019-6015

fon2601e

firmware vulnerability

dns amplification

network security

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

JSON

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities.

Affected configurations

NVD

Node

fonfon2601e-se_firmwareRange≤1.1.7

AND

fonfon2601e-seMatch-

Node

fonfon2601e-re_firmwareRange≤1.1.7

AND

fonfon2601e-reMatch-

Node

fonfon2601e-fsw-s_firmwareRange≤1.1.7

AND

fonfon2601e-fsw-sMatch-

Node

fonfon2601e-fsw-b_firmwareRange≤1.1.7

AND

fonfon2601e-fsw-bMatch-

CPENameOperatorVersion
fon:fon2601e-se_firmwarefon fon2601e-se firmwarele1.1.7

CPE	Name	Operator	Version
fon:fon2601e-se_firmware	fon fon2601e-se firmware	le	1.1.7

CNA Affected

[
  {
    "product": "FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B",
    "vendor": "FON Wireless Limited",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions 1.1.7 and earlier"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU94678942/index.html

fonjapan.zendesk.com/hc/ja/articles/360000558942

Social References

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

JSON

Related for CVE-2019-6015

prion1 cvelist1 nvd1