CVE-2015-7279

{"id": "CVE-2015-7279", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2015-12-31T05:59:21.337", "references": [{"url": "http://www.securityfocus.com/bid/78818", "source": "cret@cert.org"}, {"url": "https://www.kb.cert.org/vuls/id/763576", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/78818", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.kb.cert.org/vuls/id/763576", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value."}, {"lang": "es", "value": "Dispositivos Amped Wireless R10000 con firmware 2.5.2.11 utilizan un algoritmo indebido para seleccionar un valor ID en la cabecera de una consulta DNS, lo que hace m\u00e1s f\u00e1cil para atacantes remotos suplantar respuestas prediciendo este valor."}], "lastModified": "2024-11-21T02:36:29.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ampedwireless:r10000_firmware:2.5.2.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "181B62A0-3475-4358-90F6-E729CF0F87C2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ampedwireless:r10000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6581CEAE-F9A9-478C-882E-469209384DA4"}], "operator": "OR"}], "operator": "AND"}], "evaluatorComment": "<a href=\"https://cwe.mitre.org/data/definitions/331.html\">CWE-331: Insufficient Entropy</a>", "sourceIdentifier": "cret@cert.org"}