Dual DHCP DNS Server 8.01 accepts unsolicited UDP DNS responses without verifying that the answer comes from a legitimate upstream server. By matching solely the transaction identifier, the daemon inserts the data into its cache. If an attacker succeeds in delivering a forged reply, the stolen entries can resolve any queried domain name to an attacker‑controlled IP address, effectively redirecting network traffic to malicious destinations.

The vulnerability is limited to the Dual DHCP DNS Server software version 8.01. No other vendors or product variants are referenced in the available data, so installations of this exact version are impacted.

With a CVSS score of 9.1 the flaw is considered high severity. The EPSS score of less than 1 % indicates a low likelihood of exploitation in the wild. It is not listed in the CISA Known Exploited Vulnerabilities catalog. The attack can be carried out from any network host that can reach the server’s DNS listening port, requiring no authentication or elevated privileges. Successful cache poisoning can compromise the confidentiality of traffic by redirecting users to malicious endpoints and can degrade availability by disrupting resolution of legitimate domain names.