534 matches found
PT-2016-3872
Name of the Vulnerable Software and Affected Versions Huawei Mobile WiFi E5151 versions before E5151s-2TCPU-V200R001B146D27SP00C00 Huawei Mobile WiFi E5186 versions before V200R001B310D01SP00C00 Description The issue allows remote attackers to spoof responses via unspecified vectors, making it...
PowerDNS Recursor 3.x < 3.1.4 Multiple Vulnerabilities
According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 3.x prior to 3.1.4. It is, therefore, affected by multiple vulnerabilities : - A buffer overflow condition exists that allows a remote attacker, via a specially crafted TCP...
CVE-2015-5987
Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
CVE-2015-5987
Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
CVE-2015-7282
ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...
CVE-2015-7279
Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
Design/Logic Flaw
ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...
Input validation
Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
CVE-2015-7279
Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
CVE-2015-7282
The CVE-2015-7282 entry concerns ReadyNet WRT300N-DD devices (firmware 1.0.26) where DNS queries use a fixed source port. This behavior enables a remote attacker to spoof DNS responses by choosing that destination port, potentially affecting LAN clients by redirecting them to attacker-controlled ...
CVE-2015-7279: Undefined Security Weakness
Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
PT-2015-3207
Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11 Description The issue is related to the use of an improper algorithm for selecting the ID value in the header of a DNS query. This makes it easier for remote attackers to spoof responses by predicting thi...
CVE-2015-5987: Undefined Security Weakness
Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
CVE-2015-8263
NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...
CVE-2015-8262
Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
Input validation
Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
Code injection
NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...
CVE-2015-8262
Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
CVE-2015-8262
CVE-2015-8262 affects Buffalo AirStation Extreme N600 Router WZR-600DHP2 (firmware 2.09, 2.13, 2.16). The issue is use of insufficiently random values in DNS queries: DNS TXIDs are predictable and source ports can be static, enabling a remote attacker to spoof responses and misdirect LAN clients....
CVE-2015-8263
The CVE-2015-8263 issue affects Netgear WNR1000v3 routers running firmware 1.0.2.68, where DNS queries use the same source port, enabling remote attackers to spoof responses. Root cause: use of static source ports for DNS. Impact: LAN clients can be redirected to attacker‑controlled hosts via spo...