NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF

No description provided by source. Sense of Security - Security Advisory - SOS-11-011 Release Date. 20-Sep-2011 Last Update. - Vendor Notification Date. 22-Mar-2011 Product. NETGEAR Wireless Cable Modem Gateway CG814WG Affected versions. Hardware 1.03, Software V3.9.26 R14 verified, possibly othe...

Scientific Atlanta DPX2100 Cable Modem LanD Packet Denial of Service Vulnerability

No description provided by source. source: www.securityfocus.com/bid/15870/info Scientific Atlanta DPX2100 cable modems are prone to a denial of service vulnerability. These devices are susceptible to a remote denial of service vulnerability when handling TCP 'LanD' packets. This issue allows...

Motorola SB5101 Hax0rware Rajko HTTPD Remote Exploit PoC

No description provided by source. !/usr/bin/perl Motorola SB5101 Hax0rware Rajko HttpD Remote Exploit PoC Author: Dillon Beresford Date: 6/6/2010 Vendor: SBHacker & Motorola Software Link: http://www.sbhacker.net/forum/index.php Tested on Hax0rware 1.1 R30, R32 and R39 Description: Motorola SB51...

Motorola SURFBoard Cable Modem Directory Traversal

No description provided by source. Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the...

Thomson Wireless VoIP Cable Modem Auth Bypass

No description provided by source. Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other Vulnerabilities: Unauthenticated...

Motorola SBG6580 Cable Modem & Wireless Router - DoS Reboot

No description provided by source. Exploit Title: Motorola SBG6580 Cable Modem & Wireless-N Router Denial of Service Date: 01/03/14 Exploit Author: nicx0 Vendor Homepage: http://www.motorola.com/ Software Link:...

PT-2014-5494

Name of the Vulnerable Software and Affected Versions ARRIS formerly Motorola SBG901 SURFboard Wireless Cable Modem affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the...

CVE-2014-3778: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in goform/RgDdns in ARRIS formerly Motorola SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the dns service via the DdnsService parameter, 2 change the...

Hacking Cable TV Networks to Broadcast Your Own Video Channel

I was watching my favorite show on the television and it was just half over when I saw something which was definitely not a part of the show I was watching. My television screen gone blank for a couple of seconds and then what I saw was totally unbelievable for my eyes. It was my friend ‘Rahul...

Ubee DDW3611b Cable Modem Wifi Enumeration

This module will extract WEP keys and WPA preshared keys from certain Ubee cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ubee DDW3611b Cable Modem Wifi Enumeration', 'Descriptio...

Netopia 3347 Cable Modem Wifi Enumeration

This module extracts WEP keys and WPA preshared keys from certain Netopia cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netopia 3347 Cable Modem Wifi Enumeration', 'Description'...

Time Warner Cable Publishes First Transparency Report

Time Warner Cable has joined a half-dozen telecommunications and technology companies that, in the past six months, have published their first transparency report on government and law enforcement requests for user data and content. Since the Edward Snowden leaks began last June, transparency...

ZTE F460 / F660 Cable Modems web_shell_cmd.gch Administrative Backdoor

Nessus was able to access the 'webshellcmd.gch' script on the device, which is a backdoor that allows administrative commands to be run on the device without authentication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73104; scriptversion"1.5"; scriptcvsdate"Date:...

CVE-2014-2321

webshellcmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials...

CVE-2014-2321

CVE-2014-2321 affects ZTE F460 and F660 cable modems where the web_shell_cmd.gch backdoor allows remote attackers to obtain administrative access by sending commands (e.g., using set TelnetCfg) to enable TELNET with specified credentials. The Mozi IoT analysis additionally notes that the backdoor...

CVE-2014-2321

webshellcmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials...

ZTE F460/F660 cable modems contain an unauthenticated backdoor

Overview ZTE F460/F660 cable modems contain an unauthenticated backdoor. Description ZTE F460/F660 cable modems contain an unauthenticated backdoor. The webshellcmd.gch script accepts unauthenticated commands that have administrative access to the device. It has been reported that the...

Motorola SBG6580 Cable Modem Wireless Router - Reboot (Denial of Service)

Motorola SBG6580 Cable Modem Wireless Router - Reboot Denial of Service Exploit Title: Motorola SBG6580 Cable Modem & Wireless-N Router Denial of Service Date: 01/03/14 Exploit Author: nicx0 Vendor Homepage: http://www.motorola.com/ Software Link:...

CVE-2012-3047

Cross-site scripting XSS vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3047

The CVE-2012-3047 issue affects Cisco Scientific Atlanta D20 and D30 cable modems, where the web-wizard setup page is vulnerable to Cross-site Scripting (XSS). The root cause is insufficient sanitization of user-supplied input on the web wizard setup page, enabling an unauthenticated, remote atta...