Cisco Cable Modem with Digital Voice Remote Code Execution Vulnerability

A vulnerability in the web server used in the Cisco Cable Modem with Digital Voice Model DPC2203 could allow an unauthenticated, remote attacker to exploit a buffer overflow and cause arbitrary code execution. The vulnerability is due to improper input validation for HTTP requests. An attacker...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected device. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Arris DG1670A Cable Modem Remote Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2016-001 : Arris DG1670A Cable Modem Remote Command Execution Title: Arris DG1670A Cable Modem Remote Command Execution Advisory ID: KL-001-2016-001 Publication Date: 2016.02.12 Publication URL:...

Arris DG1670A Cable Modem Remote Command Execution

Vulnerability Details Affected Vendor: Arris Affected Product: Cable Modem Affected Version: DG1670A, TG1670 Platform: Embedded Linux CWE Classification: CWE-73: External Control of File Name or Path; CWE-77: Improper Neutralization of Special Elements used in a Command; CWE-522: Insufficiently...

Horizon HD / WiFi Weak WiFi Passphrase Generation

---------------------------------------------------------------------------- Advisory ID: HCA0005 - http://hackingcorp.ch/advisories/HCA0005.pdf Product: Horizon HD / WiFi Vendor: Liberty Global plc companies Unitymedia GmbH, UPC Cablecom, ... Affected Versions: unknown Tested Versions: current...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure

Thomson CableHome Gateway DWG849 Cable Modem Gateway - Information Exposure Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

Exploit for hardware platform in category local exploits +-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B...

Thomsom Cable Modem TWG850-4B ST9C.05.08 Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +...

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: 0rwelllabs +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +- Hardwar...

CVE-2015-4202

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems CMTS does not properly restrict access to the IP Detail Record IPDR service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID...

Code injection

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems CMTS does not properly restrict access to the IP Detail Record IPDR service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID...

ARRIS Touchstone Cable Modem Detection

Binary data arristouchstonecablemodemdetect.nbin...

Arris DG950A Cable Modem Wifi Enumeration

This module will extract WEP keys and WPA preshared keys from Arris DG950A cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Arris DG950A Cable Modem Wifi Enumeration', 'Description...

CVE-2014-4862

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request...

CVE-2014-4863

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request...

Design/Logic Flaw

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request...

CVE-2014-4862

CVE-2014-4862 affects Netmaster CBW700N modems; CVE-2014-4863 affects Arris Touchstone DG950A modems. Both involve SNMP public community leaking sensitive data (passwords, keys, SSIDs) via SNMP requests. Publicly available details confirm exposure of credentials and wireless keys; DG950A document...

CVE-2014-4862

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request...

CVE-2014-4863

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request...

CVE-2014-4863

CVE-2014-4863 affects the Arris Touchstone DG950A cable modem (software 7.10.131). Public SNMP community access (SNMP community: public) enables reading sensitive information, including passwords, keys, and SSIDs, via SNMP requests. Connected documents corroborate: a Metasploit auxiliary module t...