RouterOS versions 6.45.6 Stable,... CVE-2019-3979

5.0 AV AC AU C I A
发布: 2019-10-29
修订: 2019-11-01

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router adds all A records to its DNS cache even when the records are unrelated to the domain that was queried. Therefore, a remote attacker controlled DNS server can poison the router's DNS cache via malicious responses with additional and untrue records.

0%
暂无可用Exp或PoC
当前有2条受影响产品信息