What is CVE-2015-7282?

CVE-2015-7282 is a medium-severity vulnerability in Readynet Solutions Wrt300n-Dd, classified under Improper Input Validation. CVSS score: 5.8/10. Published 2015-12-31.

How severe is CVE-2015-7282?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Improper input validation in Readynet Solutions Wrt300n-Dd

CVE-2015-7282

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (58.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.

Affected products

Readynet_solutions Wrt300n-dd
Readynet_solutions Wrt300n-dd_firmware — versions 1.0.26
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cret@cert.org (vdb-entry, x_refsource_BID)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2015-7282?: CVE-2015-7282 is a medium-severity vulnerability in Readynet Solutions Wrt300n-Dd, classified under Improper Input Validation. CVSS score: 5.8/10. Published 2015-12-31.
How severe is CVE-2015-7282?: Medium severity. CVSS v3 base score is 5.8 out of 10.