CVE-2015-5987
HighSummary
Belkin F9K1102 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, making it easier for remote attackers to spoof responses by predicting this value.
Risk Assessment
Attackers can exploit this vulnerability to perform spoofing attacks, potentially leading to traffic redirection or data theft.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor DNS traffic for potential attacks.
Other vulnerabilities in Belkin F9K1102, firmware 2.10.17
See all- CVE-2015-5989Critical
Belkin F9K1102 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, allowing remote attackers to gain administrative privileges through certain changes to LockStatus and Login_Success values.
- CVE-2015-5988Critical
The web management interface on Belkin F9K1102 devices with firmware 2.10.17 has a blank password, allowing remote attackers to gain administrative privileges by leveraging a LAN session.
Original NVD description (English source)
Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value.