Security Advisory

CVE-2019-3978

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-10-28 21:32:57
Last updated 2024-08-04 19:26:27
Assigner tenable
CVSS score not scored
State PUBLISHED

Description

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning