CVE-2017-6520 The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a den...
CriticalCVSS 9.1
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bose soundtouch 30 | All versions | No fix listed |
References
- www.secfu.net mitigation third-party-advisory