CVE-2019-6015

🗓️ 04 Oct 2019 17:55:42Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 171 Views

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue allowing DNS amplification attacks

Reporter	Title	Published	Views	Family All 7
CNVD	Multiple FON Products Input Validation Error Vulnerability	2 Oct 201900:00	–	cnvd
Cvelist	CVE-2019-6015	4 Oct 201917:55	–	cvelist
EUVD	EUVD-2019-15583	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	FON routers may behave as an open resolver	2 Oct 201901:59	–	jvn
NVD	CVE-2019-6015	4 Oct 201919:15	–	nvd
Prion	Open redirect	4 Oct 201919:15	–	prion
RedhatCVE	CVE-2019-6015	22 May 202510:18	–	redhatcve

NVD

Node

fon fon2601e-se_firmwareRange≤1.1.7

AND

fon fon2601e-seMatch-

Node

fon fon2601e-re_firmwareRange≤1.1.7

AND

fon fon2601e-reMatch-

Node

fon fon2601e-fsw-s_firmwareRange≤1.1.7

AND

fon fon2601e-fsw-sMatch-

Node

fon fon2601e-fsw-b_firmwareRange≤1.1.7

AND

fon fon2601e-fsw-bMatch-

[
  {
    "product": "FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B",
    "vendor": "FON Wireless Limited",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions 1.1.7 and earlier"
      }
    ]
  }
]

Source	Link
fonjapan	www.fonjapan.zendesk.com/hc/ja/articles/360000558942
jvn	www.jvn.jp/en/vu/JVNVU94678942/index.html

21 Nov 2024 04:45Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 27.8

EPSS0.00296

CWE-400