CVE-2015-8265 Other in n/a
Remote attackers can spoof DNS responses due to static source ports, potentially redirecting traffic or bypassing security controls on Huawei mobile WiFi routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-8265?
CVE-2015-8265 is a high-severity vulnerability in n/a, published on 1 Feb 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors.
Weakness: CWE-20
Which versions are affected by CVE-2015-8265?
It affects 2 products.
Products include Huawei E5151 Firmware, Huawei E5186 Firmware.
How do I fix CVE-2015-8265?
No fix has been published for CVE-2015-8265 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-8265 being exploited?
There is no known exploitation of CVE-2015-8265 in the wild and no public exploit code.
Sources
Also known as GHSA-cwcr-9q43-q45r.