7.5

CVE-2017-10874

PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntt-east ≫ Pwr-q200 Firmware Version-
   Ntt-east ≫ Pwr-q200 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.32% 0.672
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-330 Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

http://web116.jp/shop/hikari_p/q200/q200_00.html
Third Party Advisory
Issue Tracking
https://jvn.jp/en/jp/JVN73141967/index.html
Third Party Advisory
VDB Entry