Skip to content

CVE-2015-8262 Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof re...

MediumCVSS 6.8 EPSS 1.1%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value.

Affected products

ProductAffected versionsFixed in
buffalotech airstation extreme n600 firmware = 2.09 No fix listed
buffalotech airstation extreme n600 firmware = 2.13 No fix listed
buffalotech airstation extreme n600 firmware = 2.16 No fix listed
buffalotech airstation extreme n600 All versions No fix listed

References

  • 78877 vdb-entry
  • VU#646008 third-party-advisory us-government-resource