Executive Summary

Name CVE-2015-7296 First vendor Publication 2015-09-21
Vendor Cve Last vendor Modification 2015-09-30

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score 4.3 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a linear algorithm for selecting the ID value in the header of a DNS query performed on behalf of the device itself, which makes it easier for remote attackers to spoof responses by including this ID value, as demonstrated by a response containing the address of the firmware update server, a different vulnerability than CVE-2015-2914.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7296

CPE : Common Platform Enumeration

Os 2
Os 1

Sources (Detail)

Source Url
CERT-VN http://www.kb.cert.org/vuls/id/906576

Alert History

If you want to see full details history, please login or register.
Date Informations
2020-05-23 01:57:09
  • Multiple Updates
2020-05-23 00:47:01
  • Multiple Updates
2019-06-21 12:06:51
  • Multiple Updates
2016-06-30 22:34:34
  • Multiple Updates
2015-10-01 00:23:21
  • Multiple Updates
2015-09-22 09:23:52
  • Multiple Updates
2015-09-21 17:21:21
  • First insertion