Arris Modems Hardcoded Backdoor Vulnerability (CNVD-2017-24358)

Arris Modems are modems produced by telecom equipment manufacturer Arris, customized for AT&T home users for on-net access. A hard-coded backdoor vulnerability exists in Arris Modems, which allows an attacker to obtain the device's serial number and use the account password "bdctest/bdctest" to...

R7-2017-07: Multiple Fuze TPN Handset Portal vulnerabilities (FIXED)

This post describes three security vulnerabilities related to access controls and authentication in the TPN Handset Portal, part of the Fuze platform. Fuze fixed all three issues by May 6, 2017, and user action is not required to remediate. Rapid7 thanks Fuze for their quick and thoughtful respon...

MAC Moves Observed on NetScaler When More Than One Interface is in Same VLAN

MAC moves observed on NetScaler when more than one interface is in same VLAN. The following entries are seen in newnslog: current time is Mon Jun 5 17:03:55 2017 Channel 0/1 has been muted conflict MAC 00:1d:45:24:b3:68 Channel 1/1 has been muted conflict MAC 00:1d:45:24:b3:68 current time is Mon...

Cisco DPC3939 Firmware Information Disclosure Vulnerability (CNVD-2017-27790)

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. The Cisco DPC3939 firmware has a security vulnerability. Allows a remote attacker to discover a hidden home security wi-fi network by exploiting the embedding of DNS hostnames with MTA/VoIP MAC addresses...

Netgear Now Collects Router 'Analytics Data' — Here’s How to Disable It

Is your router collects data on your network? Netgear last week pushed out a firmware update for its wireless router model NightHawk R7000 with a remote data collection feature that collects router's analytics data and sends it to the company's server. For now, the company has rolled out the...

ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution

Remote Code Execution Component: networkmap CVE: CVE-2017-6548 networkmap is responsible for generating a map of computers connected to the router. It continuously monitors the LAN to detect ARP requests submitted by unknown computers. When a new MAC address appears it will probe the related IP...

Timing Attacks

OpenSSL is vulnerable to timing attacks. The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2 doesn't check MAC addresses in constant time during the processing of a malformed CBC padding. This is also known as the "Lucky Thirteen" issue...

About the security content of Apple TV 7.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Alpha Version of Sandboxed Tor Browser Released

A sandboxed version of the Tor Browser was released over the weekend, and while there are still some rough edges and bugs – potentially major, according to the developer– it could be the first step toward protecting Tor users from recent de-anonymization exploits. Yawning Angel, a longtime Tor...

CVE-2016-1275

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface...

Design/Logic Flaw

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface...

CVE-2016-1275

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the service/jni/comandroidserverwifiWifiNative.cpp function in the Android operating system’s Wi-Fi stack is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially creat...

Judge Tosses Evidence Gathered by FBI's Tor Exploit

The FBI’s refusal to share details about a network investigative technique it used to gather evidence against a Vancouver teacher charged with possession of child pornography has forced a federal judge’s hand to exclude the evidence from trial. The NIT used by the FBI to hack the Playpen website ...

DHCP IP exhaustion attack: DHCPwn

DHCPwn is a tool used for testing DHCP IP exhaustion attacks. It can also be used to sniff local DHCP traffic. The DHCP protocol is connectionless and implemented via UDP. These two characteristics allow this attack to be performed. Since there is no actual connection being made between the clien...

Ethernet MAC Addresses

This plugin gathers MAC addresses discovered from both remote probing of the host e.g. SNMP and Netbios and from running local checks e.g. ifconfig. It then consolidates the MAC addresses into a single, unique, and uniform list. TRUSTED...

Techie Police Officer Builds a Sniffing Tool to Track Stolen Devices (based on War-Driving)

Ever wonder, How can you Track your Stolen Smartphone, Laptop or any Smart Device? ...With IMEI Number? ...Or IP address? ...Or may be some special types of equipment? Well, Not required, because now it is possible to track stolen devices just by scanning their MAC addresses. Yes, Just MAC...

The vulnerability of iOS and Mac OS X operating systems allows attackers to gain access to the MAC addresses of devices, which are obtained during previous Wi-Fi sessions.

The vulnerability of the bootp component in iOS and Mac OS X operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to access the protected information about the MAC addresses of devices, obtained during previous WiFi sessions,...

CVE-2015-3778

bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addresses seen in previous Wi-Fi sessions by sniffing an 802.11 network for DNAv4 broadcast traffic...

Design/Logic Flaw

bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addresses seen in previous Wi-Fi sessions by sniffing an 802.11 network for DNAv4 broadcast traffic...