CVE-2019-3978CWE-306

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291

published October 28, 2019

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10274 · 95.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2019-10-28T21:32Z
EPSS history
Timeline
  • 28 OCT 21:32Z
    RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291
    cvelistv5