Skip to content
OpenAdvisories
Unscored CVE-2017-10874 EUVD-2017-2514GHSA-8hqr-v5jq-x64w

PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning att…

Published Dec 1, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: NIPPON TELEGRAPH AND TELEPHONE EAST Product: PWR-Q200

Description

PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning attacks.

Affected products

VendorProductAffectedFixed
NIPPON TELEGRAPH AND TELEPHONE EAST PWR-Q200 all firmware versions —

References