No Password Required! 135 Million Modems Open to Remote Factory Reset

More than 135 Million modems around the world are vulnerable to a flaw that can be exploited remotely to knock them offline by cutting off the Internet access. The simple and easily exploitable vulnerability has been uncovered in one of the most popular and widely-used cable modem, the Arris...

ARRIS / Motorola SBG6580 Cable Modem SNMP Enumeration Module

This module allows SNMP enumeration of the ARRIS / Motorola SURFboard SBG6580 Series Wi-Fi Cable Modem Gateway. It supports the username and password for the device user interface as well as wireless network keys and information. The default community used is "public". This module requires...

Motorola SURFBoard Cable Modem Directory Traversal

No description provided by source. Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the...

Surfboard httpd 1.1.9 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9299/info It has been reported that Surfboard httpd is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents...

CVE-2014-3778

The CVE-2014-3778 entry refers to ARRIS (Motorola) SBG901 SURFboard Wireless Cable Modem with CSRF in goform/RgDdns. Attacks can hijack admin auth to perform four actions: DdnsService, DdnsUserName, DdnsPassword, and DdnsHostName changes. Concrete evidence appears in multiple connected sources (E...

CVE-2010-2307

Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via 1 "//" multiple leading slash, 2 ../ dot dot sequences, and encoded dot dot sequences in a URL...

CVE-2010-2307

Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via 1 "//" multiple leading slash, 2 ../ dot dot sequences, and encoded dot dot sequences in a URL...

CVE-2010-2307

CVE-2010-2307 : Directory traversal flaw in the Motorola SURFBoard SBV6120E web server (firmware SBV6X2X-1.0.0.5-SCM-02-SHPC) allows remote attackers to read arbitrary files via multiple leading slashes, dot-dot sequences, or encoded dot-dot in a URL. Affected component is the web server handling...

Motorola SURFBoard Cable Modem Directory Traversal

Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the /etc/passwd file from the modem:...

Motorola Surfboard Cable Modem - Directory Traversal

Motorola Surfboard Cable Modem - Directory Traversal Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls...

Motorola SURFBoard Cable Modem Directory Traversal

Exploit for hardware platform in category local exploits ================================================== Motorola SURFBoard Cable Modem Directory Traversal ================================================== Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03...

Motorola Surfboard cable modem cross-site request forgery vulnerability

Overview Motorola Surfboard cable modems may contain a cross-site request forgery vulnerability that allows an attacker to cause an affected modem to reboot or reload its configuration. Description Cable modems are designed to deliver broadband Internet access via unused bandwidth on a cable...

CVE-2008-2002

Multiple cross-site request forgery CSRF vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to 1 cause a denial of service device reboot via the "Restart Cable Modem" value in the BUTTONINPUT parameter to configdata.html, and 2 cause a denial of...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to 1 cause a denial of service device reboot via the "Restart Cable Modem" value in the BUTTONINPUT parameter to configdata.html, and 2 cause a denial of...

CVE-2008-2002

Multiple cross-site request forgery CSRF vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to 1 cause a denial of service device reboot via the "Restart Cable Modem" value in the BUTTONINPUT parameter to configdata.html, and 2 cause a denial of...

CVE-2008-2002

CVE-2008-2002 describes multiple cross-site request forgery (CSRF) vulnerabilities in Motorola Surfboard devices running software SB5100-2.3.3.0-SCM00-NOSH. The issue allows remote attackers to trigger denial of service conditions by crafting requests to configdata.html with specific BUTTON_INPUT...

Motorolla Surfboard cable modem multiple security vulnerabilities

DoS conditions, crossite request forgery...

Sea-Surfing on the Motorola Surfboard

More information about this flaw can be found here: http://www.rooksecurity.com/blog/?p=4 Motorola Surfboard Cable Modems suffer from two Denial of Service attacks by means of Cross Site Request Forgery. The latest version of The Motorola Surfboard is affected at the time of the writing. Restarts...

motsurf-csrf.txt

More information about this flaw can be found here: http://www.rooksecurity.com/blog/?p=4 Motorola Surfboard Cable Modems suffer from two Denial of Service attacks by means of Cross Site Request Forgery. The latest version of The Motorola Surfboard is affected at the time of the writing. Restarts...

CVE-2006-5196

The CVE affects the Motorola SURFboard SB4200 Cable Modem HTTP interface. A remote attacker can crash the device by sending a request where MfcISAPICommand is SecretProc and the Secret parameter contains a long string, leading to a denial of service. The NVD score is CVSSv2 7.8 (HIGH) with networ...