DNS Query Spoofing Vulnerability in Belkin F9K1102 Routers
CVE-2015-5987
8.6HIGH
Summary
The Belkin F9K1102 router, specifically version 2.10.17, exhibits a flaw in its DNS query handling due to an improper algorithm used for selecting ID values in DNS query headers. This design weakness allows potential attackers to predict the ID value, making it easier to spoof DNS responses. Such vulnerabilities can lead to various attack vectors, including redirecting users to malicious sites or intercepting sensitive data, underscoring the need for robust network security measures.
References
CVSS V3.1
Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved