{"id":"CVE-2025-30192","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-30192","generatedAt":"2026-10-28T06:13:54.050Z","title":"An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries.","description":"An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries.\n\nThe updated version include various mitigations against spoofing attempts of ECS enabled queries by chaining ECS enabled requests and enforcing stricter validation of the received answers.\n\nThe most strict mitigation done when the new setting outgoing.edns_subnet_harden (old style name edns-subnet-harden) is enabled.","published":"2025-07-21T13:15:27.000Z","lastModified":"2026-06-17T09:08:20.000Z","status":"Deferred","sourceIdentifier":"security@open-xchange.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-345"],"affected":[],"epss":{"score":0.00272,"percentile":0.19431,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.27%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-04.html","source":"security@open-xchange.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-30192","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}