Design/Logic Flaw

Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of known values and a nonce with insufficient entropy. The number of possible PSKs is about 1.78 billion, which is too small...

CVE-2019-9555

Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of known values and a nonce with insufficient entropy. The number of possible PSKs is about 1.78 billion, which is too small...

CVE-2019-9555

CVE-2019-9555 affects Sagemcom F@st 5260 routers (firmware 0.4.39 and possibly others) where WPA PSKs are derived from a two-part wordlist plus a nonce with insufficient entropy. This yields roughly 1.78 billion possible PSKs, making the WPA key space far smaller than expected and enabling potent...

CVE-2019-9555: Insufficient Entropy

Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of known values and a nonce with insufficient entropy. The number of possible PSKs is about 1.78 billion, which is too small...

PT-2019-19706

Name of the Vulnerable Software and Affected Versions Sagemcom F@st 5260 version 0.4.39 Description The issue concerns the generation of a Pre-Shared Key PSK in WPA mode, which is derived from a 2-part wordlist of known values and a nonce with insufficient entropy. This results in a limited numbe...

Sagemcom Router Insufficient Default PSK Entropy

...

Design/Logic Flaw

Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...

CVE-2017-6552

Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...

CVE-2017-6552

Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...

CVE-2017-6552

CVE-2017-6552 affects Livebox 3 (Sagemcom SG30_sip-fr-5.15.8.1). The vulnerability is an insufficiently large default IPv6 routing table size, which can be filled in minutes, allowing a remote attacker to cause a denial-of-service by rendering the device unresponsive for voice, internet, and TV s...

CVE-2017-6552

Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...

Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 - Denial of Service

Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 - Denial of Service !/usr/bin/python Exploit Title: CVE-2017-6552 - Local DoS Buffer Overflow Livebox 3 Date: 09/03/2017 Exploit Author: Quentin Olagne Vendor Homepage: http://www.orange.fr/ Version: SG30sip-fr-5.15.8.1 Tested on: Livebox 3 - Sagemcom CVE :...

Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc !/usr/bin/python Exploit Title: CVE-2017-6552 - Local DoS Buffer Overflow Livebox 3 Date: 09/03/2017 Exploit Author: Quentin Olagne Vendor Homepage: http://www.orange.fr/ Version: SG30sip-fr-5.15.8.1 Tested on: Livebox 3 - Sagemcom CVE :...

Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 Denial Of Service

!/usr/bin/python Exploit Title: CVE-2017-6552 - Local DoS Buffer Overflow Livebox 3 Date: 09/03/2017 Exploit Author: Quentin Olagne Vendor Homepage: http://www.orange.fr/ Version: SG30sip-fr-5.15.8.1 Tested on: Livebox 3 - Sagemcom CVE : CVE-2017-6552 ''' Livebox router has its default IPv6 routi...

PT-2017-17151

Name of the Vulnerable Software and Affected Versions Livebox 3 Sagemcom SG30 sip-fr version 5.15.8.1 Description The issue is related to an insufficiently large default value for the maximum IPv6 routing table size, which can be filled within minutes. An attacker can exploit this to render the...

CVE-2017-6552: Uncontrolled Resource Consumption

Livebox 3 Sagemcom SG30sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for...

Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 - Denial of Service

!/usr/bin/python Exploit Title: CVE-2017-6552 - Local DoS Buffer Overflow Livebox 3 Date: 09/03/2017 Exploit Author: Quentin Olagne Vendor Homepage: http://www.orange.fr/ Version: SG30sip-fr-5.15.8.1 Tested on: Livebox 3 - Sagemcom CVE : CVE-2017-6552 ''' Livebox router has its default IPv6 routi...

sagemcom.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://sagemcom.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

Sagem Fast 3304-V2 Credential Disclosure

Exploit title: FAST3304v2 Credentials Disclosure vulnerability Author: Nassim Asrir Author Company: HenceForth Author Email: [email protected] Discovered on: 13/11/2016 Tested on: Linux x8664 / Mozilla Firefox 49. Tested Version: Sagem Fast 3304-V2 other versions may also be affected Vendor:...

Sagemcom [email protected] 3864 V2 - Get Admin Password Vulnerability

Sagemcom email protected 3864 V2 suffers from a remote administrative password disclosure vulnerability. !/bin/bash Exploit Title: Sagemcom 3864 V2 get admin password Date 2015-08-15 Author: Cade Bull Software Link: null Tested on: Sagemcom email protected 3864 V2 Version: 7.253.2F3864V2Optus The...