fon vulnerabilities

Products

• fon2601e-fsw-b firmware 1
• fon2601e-fsw-s firmware 1
• fon2601e-re firmware 1
• fon2601e-se firmware 1
• la fonera 1
• la fonera+ 1
• la fonera+ firmware 1

Latest fon CVEs

Newest publication first

1. CVE-2019-6015 FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON....

   Published 2019-10-04

   High·CVSS 7.5

   FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities.

2. CVE-2011-1326 Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors.

   Published 2011-05-13

   Medium·CVSS 6.1

   Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors.

3. CVE-2007-0193 FON La Fonera routers do not properly limit DNS service access by unauthenticated clients, which allows remote attackers to tunnel traffic via DNS requests for hosts that should not be accessible befo...

   Published 2007-01-11

   High·CVSS 7.5

   FON La Fonera routers do not properly limit DNS service access by unauthenticated clients, which allows remote attackers to tunnel traffic via DNS requests for hosts that should not be accessible before authentication.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.