Sea-Surfing on the Motorola Surfboard

More information about this flaw can be found here: http://www.rooksecurity.com/blog/?p=4 Motorola Surfboard Cable Modems suffer from two Denial of Service attacks by means of Cross Site Request Forgery. The latest version of The Motorola Surfboard is affected at the time of the writing. Restarts...

Hacker attack and Defense of the PPPoE authentication and use-vulnerability and early warning-the black bar safety net

A Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed explosive growth, the operators in the use of xDSL, LAN, HFC, wireless and other access methods at the same time, in order to build an operable, manageable and profitable broadband network, is very...

CVE-2006-5196

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service device crash via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter...

CVE-2006-5196

The CVE affects the Motorola SURFboard SB4200 Cable Modem HTTP interface. A remote attacker can crash the device by sending a request where MfcISAPICommand is SecretProc and the Secret parameter contains a long string, leading to a denial of service. The NVD score is CVSSv2 7.8 (HIGH) with networ...

CVE-2006-5196: Undefined Security Weakness

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service device crash via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter...

CVE-2005-4275

Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD, as demonstrated using hping2. NOTE: the provenance of this issue is unknown; the detail...

CVE-2005-4275

Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD, as demonstrated using hping2. NOTE: the provenance of this issue is unknown; the detail...

CVE-2005-4275

CVE-2005-4275 affects the Scientific Atlanta DPX2100 Cable Modem. A remote attacker can cause a denial of service (device crash) by sending an IP packet with identical source and destination IPs and ports and the SYN flag set (LanD), demonstrated with hping2. The provenance is noted as unknown; d...

CVE-2005-4275: Undefined Security Weakness

Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD, as demonstrated using hping2. NOTE: the provenance of this issue is unknown; the detail...

CVE-2005-4215

Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LAND...

CVE-2005-4215

Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LAND...

CVE-2005-4215

Motorola SB5100E Cable Modem is affected by a LAND-style denial-of-service described in CVE-2005-4215. The vulnerability is triggered by receiving an IP packet where the source and destination IPs and ports are identical, with the SYN flag set, causing the device to crash. The available documents...

CVE-2005-4215: Undefined Security Weakness

Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LAND...

Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service

Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service source: www.securityfocus.com/bid/15870/info Scientific Atlanta DPX2100 cable modems are prone to a denial of service vulnerability. These devices are susceptible to a remote denial of service vulnerability when handling TCP...

Motorola SB5100E Cable Modem DoS

Hello. Sending "land" packet to motorola device, will cause it to crash. "LanD" packet is simple TCP syn packet: Source IP = 192.168.100.1 Destanation IP = 192.168.100.1 Source Port = 80 Destanation Port =80 SYN Flag= 1 One packet can crash modem and all network on cable part will be unreacheble...

CVE-2002-2112

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

CVE-2002-2112

CVE-2002-2112 affects RCA Digital Cable Modem DCM225 and DCM225E, and other DOCSIS-conforming modems, via SNMP using the default public community string. The underlying issue is exposure of MIB information to remote readers/writers, enabling read/write access to SNMP MIB data. The available docum...

CVE-2002-2112: Undefined Security Weakness

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

CVE-2002-1968

Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server...

CVE-2002-1944

The vulnerability CVE-2002-1944 affects the Motorola Surfboard 4200 cable modem, where remote attackers can trigger a denial-of-service (crash) by sending a SYN scan with a tool like nmap. The available documents describe the affected device and the attack vector (network-based SYN scan) and resu...