CVE-2017-6520

Critical

Published: 01/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The mDNS responder in BOSE Soundtouch 30 incorrectly responds to IPv4 unicast queries with non-link-local source addresses. This can lead to denial of service or exposure of potentially sensitive information.

Risk Assessment

Attackers may exploit this vulnerability to perform denial of service attacks or gain access to sensitive data, impacting the integrity and availability of the system.

Recommendation

It is recommended to update the firmware of the BOSE Soundtouch 30 device to fix this vulnerability and to monitor network traffic for potential attacks.

Original NVD description (English source)

The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.