CVE-2019-3978

Publication date

2019-10-28 21:32:57

Family

tenable

State

PUBLISHED

Description

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attackers choice. The DNS responses are cached by the router, potentially resulting in cache poisoning