CVE-2015-7279

Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cret@cert.org

Published

2015-12-31

Last modified

2024-08-06

Affected products

• R10000 Firmware (Ampedwireless)

References

• http://www.securityfocus.com/bid/78818
• https://www.kb.cert.org/vuls/id/763576