CVE-2025-71058 - Vulnerability Analysis

Overview

Dual DHCP DNS Server 8.01 contains a DNS cache poisoning vulnerability caused by improper validation of UDP DNS responses, letting remote attackers inject forged responses and poison the DNS cache, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can poison DNS cache, redirecting users to malicious sites and enabling phishing or further attacks.

Mitigation

Update to the latest version with proper DNS response validation.

References

• https://github.com/FPokerFace/Security-Advisory/tree/main/CVE-2025-71058
• https://sourceforge.net/projects/dhcp-dns-server/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner