ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

Cable-modems

WiFi 지원 ISP 모뎀 분석 개요 SEARCH-LAB Ltd는 5개의 홈 게이트웨이 모델을 평가했습니다. 이들 모두 전 세계 많은 인터넷 서비스 제공업체에서 사용되지만, 실제 장치는 헝가리 케이블 TV 사업자 중 하나인 UPC Magyarországhttps://www.upc.hu/에서 운영했습니다. 이 분석은 상업적으로 구매 가능한 장치와 ISP의 네트워크 자동 펌웨어 업데이트 메커니즘에서 얻은 공개적으로 접근 가능한 펌웨어 이미지를 대상으로 수행되었습니다. 2015년 6월 Ubee EVW3226 모뎀 분석을 시작했고, ...

CVE-2017-9476

CVE-2017-9476 예측 가능한 자격 증명을 사용하는 숨겨진 AP. 컴파일 root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk 사용법 root@kitploit: ./xhscmmac2psk 이 알고리즘은 PSKracker에도 추가되었습니다. 참고 자료 CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 백서 DEFCON 25 슬라이드...

CVE-2026-24444

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

CVE-2026-24444 SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

PT-2026-44402

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9 B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

PT-2025-50103

Name of the Vulnerable Software and Affected Versions NETGEAR C6220 and C6230 versions affected versions not specified Description A flaw exists that allows authenticated local WiFi users to reboot the router. This issue impacts NETGEAR C6220 and C6230 DOCSIS® 3.0 Two-in-one Cable Modem + WiFi...

SDMC NE6037 操作系统命令注入漏洞

The SDMC NE6037 is a cable modem from China's Sinodisk SDMC. An operating system command injection vulnerability exists in the SDMC NE6037 versions prior to 7.1.12.2.44, which stems from a shell command injection vulnerability in the Network Diagnostic Tool...

CVE-2016-15056

Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the web root after they are generated for download. These backup files remain accessible without authentication until the next reboot. A remote attacker on the local network can reque...

EUVD-2010-2317

Malware in sbrugna...

EUVD-2002-2091

Malware in sbrugna...

EUVD-2002-1923

Malware in sbrugna...

EUVD-2002-1947

Malware in sbrugna...

EUVD-2019-9115

Malware in sbrugna...

EUVD-2002-2089

Malware in sbrugna...

EUVD-2005-4270

Malware in sbrugna...

EUVD-2006-5181

Malware in sbrugna...

EUVD-2010-2045

Malware in sbrugna...

CVE-2019-19495

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...

CVE-2010-2082

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password aka SAPassword of W2402, which makes it easier for remote attackers to obtain privileged access...