Cable-modems

WiFi対応ISPモデムの分析 概要 SEARCH-LAB Ltdは、世界中の多くのインターネットサービスプロバイダーで使用されている5つのホームゲートウェイモデルを評価しました。実際のデバイスは、ハンガリーのケーブルTV事業者の1つであるUPC Magyarország（https://www.upc.hu/）によって運用されていました。分析は、市販されているデバイスと、ISPのネットワーク自動ファームウェア更新メカニズムから取得した公開済みファームウェアイメージに対して実行されました。 私たちは2015年6月にUbee...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

CVE-2017-9476

CVE-2017-9476 決定論的認証情報を持つ隠しアクセスポイント。 コンパイル root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk 使用方法 root@kitploit: ./xhscmmac2psk このアルゴリズムは PSKracker にも追加されています。 参考文献 CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 whitepaper DEFCON 25 slides...

CVE-2026-24444

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

CVE-2026-24444 SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

PT-2026-44402

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9 B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

PT-2025-50103

Name of the Vulnerable Software and Affected Versions NETGEAR C6220 and C6230 versions affected versions not specified Description A flaw exists that allows authenticated local WiFi users to reboot the router. This issue impacts NETGEAR C6220 and C6230 DOCSIS® 3.0 Two-in-one Cable Modem + WiFi...

SDMC NE6037 操作系统命令注入漏洞

The SDMC NE6037 is a cable modem from China's Sinodisk SDMC. An operating system command injection vulnerability exists in the SDMC NE6037 versions prior to 7.1.12.2.44, which stems from a shell command injection vulnerability in the Network Diagnostic Tool...

CVE-2016-15056

Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the web root after they are generated for download. These backup files remain accessible without authentication until the next reboot. A remote attacker on the local network can reque...

CVE-2016-15056: Insertion of Sensitive Information into Externally-Accessible File or Directory

Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the web root after they are generated for download. These backup files remain accessible without authentication until the next reboot. A remote attacker on the local network can reque...

EUVD-2002-1923

Malware in sbrugna...

EUVD-2010-2317

Malware in sbrugna...

EUVD-2002-2091

Malware in sbrugna...

EUVD-2010-2045

Malware in sbrugna...

EUVD-2006-5181

Malware in sbrugna...

EUVD-2019-9115

Malware in sbrugna...

EUVD-2002-1947

Malware in sbrugna...

EUVD-2005-4270

Malware in sbrugna...

EUVD-2002-2089

Malware in sbrugna...

CVE-2019-19495

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...