CVE-2015-7282

MEDIUM

ReadyNet WRT300N-DD Firmware 1.0.26 - DNS Spoofing via Predictable Source Port

Title source: llm

Description

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/78814

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

https://www.kb.cert.org/vuls/id/167992

Scores

CVSS v3 5.8

EPSS 0.0098

EPSS Percentile 58.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Details

CWE

CWE-20

Status published

Products (2)

readynet_solutions/wrt300n-dd

readynet_solutions/wrt300n-dd_firmware 1.0.26

Published Dec 31, 2015

Tracked Since Feb 18, 2026