Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value.
References
Link | Resource |
---|---|
https://www.kb.cert.org/vuls/id/646008 | Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/78877 |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2015-12-26 19:59
Updated : 2016-11-28 11:46
NVD link : CVE-2015-8262
Mitre link : CVE-2015-8262
JSON object : View
CWE
Products Affected
buffalotech
- airstation_extreme_n600
- airstation_extreme_n600_firmware