CVE-2015-8263

Published: Dec 27, 2015Modified: May 6, 2026

8.6

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port.

Affected (2)

Products: Netgear: Wnr1000v3 Firmware, Wnr1000v3

Netgear

2 products

Wnr1000v3 Firmware

Wnr1000v3

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Netgear Wnr1000v3 Firmware	Version 1.0.2.68
Netgear Wnr1000v3	All versions

References (4)

http://www.securityfocus.com/bid/78873

Source: cret@cert.org

https://www.kb.cert.org/vuls/id/403568

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/78873

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.kb.cert.org/vuls/id/403568

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.