On the Evil Maid USB Attack, Time Warner and the Cybersecurity Czar

Dennis Fisher and Ryan Naraine discuss the Evil Maid USB attack, the Time Warner modem vulnerability and that old standby: the cybersecurity czar. Download SHOW NOTES: How to Defeat Full-Disk Encryption in One Minute Time Warner Router Flaw Exposes Customers Apathy Creeps In as Cybersecurity Czar...

Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface

Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface source: https://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access...

CVE-2002-0119

Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service reboot via a network scan with unusual packets, such as nmap with OS detection...

CVE-1999-1228

Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others...

modem-DoS.txt

Date: Sun, 27 Sep 1998 13:52:33 -0400 From: "Max Schau Noc-Wage" Subject: 1+2=3, +++ATH0=Old school DoS +++ATH0 Prepared by Noc-Wage Max Schau, M.C.S.R Brought to you by the wonderful people of hackers undernet and M.C.S.R All OS's using a dial-up connection are at risk. NOTE This is an old...

+ + + ATH0 Modem Hang Up String Remote DoS

It was possible to disconnect the remote host by sending it an specially crafted ICMP echo request packet. It is also possible to make the remote modem hang up and dial any phone number. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10020; scriptversion"1.31";...

CVE-1999-1228

Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others...