0.0.0.0 was used instead of NXDOMAIN for block responses. On Linux, which is the target platform for netfoil, the 0.0.0.0 is sent to localhost rather than just dropped.
Unintended traffic could be sent to localhost. Impact depends on running services and firewall rules.
0.4.0Exploitability
AV:NAC:LAT:PPR:NUI:AVulnerable System
VC:HVI:HVA:NSubsequent System
SC:NSI:NSA:N7.4/CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:NOther