Open redirect

2019-10-0419:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

JSON

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities.

CPENameOperatorVersion
fon2601e-fsw-b_firmwarele1.1.7
fon2601e-fsw-s_firmwarele1.1.7
fon2601e-re_firmwarele1.1.7
fon2601e-se_firmwarele1.1.7

Name	Operator	Version
fon2601e-fsw-b_firmware	le	1.1.7
fon2601e-fsw-s_firmware	le	1.1.7
fon2601e-re_firmware	le	1.1.7
fon2601e-se_firmware	le	1.1.7

References

jvn.jp/en/vu/JVNVU94678942/index.html

fonjapan.zendesk.com/hc/ja/articles/360000558942