JVN#73141967: PWR-Q200 vulnerable to DNS cache poisoning attacks

PWR-Q200 provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION is a mobile WiFi router. PWR-Q200 is vulnerable to DNS cache poisoning attacks as DNS queries are done with a fixed source port (CWE-330).

Impact

The DNS responses spoofed by a remote attacker may result in any device on the LAN being led to a malicious server.

Solution

Do not use PWR-Q200
Stop using PWR-Q200 since PWR-Q200 is no longer supported.
The developer recommends to configure devices in the LAN to use the upstream ISP’s DNS server.
For details, refer to the information provided by the developer.

Products Affected

• PWR-Q200 all firmware versions