CVE-2015-2914

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a fixed source-port number in…

published September 21, 2015

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a fixed source-port number in outbound DNS queries performed on behalf of any device, which makes it easier for remote attackers to spoof responses by using this number for the destination port, a different vulnerability than CVE-2015-7296.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01521 · 74.4th percentile
Published
2015-09-21T10:00Z
EPSS history
Timeline
  • 21 SEP 10:00Z
    Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a fixed source-port number in…
    cvelistv5