CVE-2003-1085

The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service unstable service via a long GET request, possibly caused by a buffer overflow...

Thomnson TCM315 Denial of service

. : Shell Security Advisory : . Subject: Buffer overflow in the cable modem Thomson TCM315 Issue date: 2003 November 23 Related link: http://www.shellsec.net/leeradvisory.php?id=2 Homepage: http://www.shellsec.net Info about product: http://www.qb.ro/docs/tcm315.pdf - 1 - Introduction...

CVE-2003-0419: Undefined Security Weakness

SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface...

CVE-2002-1431: Undefined Security Weakness

Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server, which allows remote attackers to hide which host is being used to acce...

CVE-2002-2110

The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service modem device reset by connecting to port 80 on the 10.0.0.0/8 device...

CVE-2002-2112

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

Motorola Cable Modem DOS

I've found it trivial to crash the Motorola Surfboard 4200 Cable modem, as installed default by AT&T Broadband Internet. The modem acts as a bridge, but also has an internal RFC1918 IP address 192.168.100.1. Simply nmap'ing the cable user's IP address, ie: nmap -sS -p 1-1024 12.x.x.x will cause i...

Cable Modem Termination System Authentication Bypass

...

CVE-2002-0426: Undefined Security Weakness

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys...

CVE-2001-1293: Undefined Security Weakness

Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB 3CR29223 allows remote attackers to cause a denial of service crash via a long HTTP request...

CVE-2002-0127: Undefined Security Weakness

Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service hang via a port scan of the WAN port...

CVE-2001-1210

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications DOCSIS standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings...

3Com® HomeConnect® Cable Modem Denial of Service

INFO: ====================================================== object class Failure to Handle Exceptional Conditions remote Yes local No vulnerable: 3Com® HomeConnect® Cable Modem External with USB 3CR29223 -- DISCONTINUED Not Tested: 3CR29223-A -- DISCONTINUED DISCUSSION:...

CVE-2001-1293

Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB 3CR29223 allows remote attackers to cause a denial of service crash via a long HTTP request...

CVE-1999-0791

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...

CVE-1999-0791: Undefined Security Weakness

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...

Hybrid_network_cable_modems.txt

KSRT Security Advisories http://www.ksrt.org Contact Account: [email protected] Advisory Subscription: Send an empty message to: [email protected] ---- KSRT Advisory 012 Date: Oct. 6 1999 ID : hybr-hsmp-012 Affected Program: Hybrid Network's Cable Modems Author: David Goldsmith...

CVE-1999-0791

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...

Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration

Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration source: https://www.securityfocus.com/bid/695/info Hybrid Network's cable modems are vulnerable to several different types of attack due to a lack of authentication for the remote administration/configuration system. The cab...

Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration

source: https://www.securityfocus.com/bid/695/info Hybrid Network's cable modems are vulnerable to several different types of attack due to a lack of authentication for the remote administration/configuration system. The cable modems use a protocol called HSMP, which uses UDP as its transport lay...