CVE-2015-7282

The CVE-2015-7282 entry concerns ReadyNet WRT300N-DD devices (firmware 1.0.26) where DNS queries use a fixed source port. This behavior enables a remote attacker to spoof DNS responses by choosing that destination port, potentially affecting LAN clients by redirecting them to attacker-controlled ...

ReadyNet WRT300N-DD Wireless Router contains multiple vulnerabilities

Overview ReadyNet WRT300N-DD Wireless Router, firmware version 1.0.26, uses default credentials, is vulnerable to cross-site request forgery, and uses insufficiently random values for DNS queries. Description CWE-255: Credentials Management - CVE-2015-7280The ReadyNet WRT300N-DD Wireless Router...