混合电缆调制解调器远程配置漏洞

混合电缆调制解调器远程配置漏洞

漏洞ID 1105564 漏洞类型 设计错误
发布时间 1999-10-05 更新时间 2005-05-02
图片[1]-混合电缆调制解调器远程配置漏洞-安全小百科CVE编号 CVE-1999-0791
图片[2]-混合电缆调制解调器远程配置漏洞-安全小百科CNNVD-ID CNNVD-199910-020
漏洞平台 Hardware CVSS评分 10.0
|漏洞来源
https://www.exploit-db.com/exploits/19538
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-199910-020
|漏洞详情
混合网络电缆调制解调器中不包括用于管理的认证机制,远程攻击者利用该漏洞通过HSMP协议破坏系统。
|漏洞EXP
source: http://www.securityfocus.com/bid/695/info

Hybrid Network's cable modems are vulnerable to several different types of attack due to a lack of authentication for the remote administration/configuration system. The cable modems use a protocol called HSMP, which uses UDP as its transport layer protocol. This makes it trivial to spoof packets and possible for hackers to compromise cable-modem subscribers anonymously. The possible consequences of this problem being exploited are very serious and range from denial of service attacks to running arbitrary code on the modem.

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19538-1.tar.gz
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19538-2.tar.gz
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19538-3.tar.gz
|参考资料

来源:BID
名称:695
链接:http://www.securityfocus.com/bid/695

相关推荐: Multiple Active MailServer SMTP Command Buffer Overflow Vulnerability

Multiple Active MailServer SMTP Command Buffer Overflow Vulnerability 漏洞ID 1099902 漏洞类型 Boundary Condition Error 发布时间 2003-06-26 更…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享