Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3m56-p87c-39jp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning

EPSS

Процентиль: 95%
0.16611
Средний

7.5 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.5
nvd
больше 6 лет назад

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning

CVSS3: 7.5
fstec
больше 6 лет назад

Уязвимость операционной системы RouterOS, связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 95%
0.16611
Средний

7.5 High

CVSS3

Дефекты

CWE-306