3 ms·
Speaking of rebooting vulnerabilities, I'm reminded of the CSRF vulnerability in the popular Motorola SB6141 modem. Not only can, say, a embedded resource in a
by bscphil 8y ago
Speaking of rebooting vulnerabilities, I'm reminded of the CSRF vulnerability in the popular Motorola SB6141 modem. Not only can, say, a embedded resource in a forum reboot your modem, it can also request reprovisioning, which can take you offline for up to half an hour. It's been fixed, at least by my local TWC, but I wonder if all ISPs have rolled out the firmware update.
https://www.securityforrealpeople.com/2016/04/arris-motorola-surfboard-modem.html https://www.securityforrealpeople.com/2016/04/arris-motorola...
- lbeltrame 8y agoFor the record, a popular ISP in my country designed its own router, which uses shell commands to compute the password hash, without even attempting to sanitize input[1]. If you have access to the login page (and until recently, it was also available via WAN) you could do all fancy tricks by putting the right commands in the password field, including bricking the equipment itself. [1] https://github.com/Nimayer/fastgate-toolkit/wiki/Get-a-root-shell-(SSH)#how-it-works https://github.com/Nimayer/fastgate-toolkit/wiki/Get-a-root-... People tried to contact the ISP and got no response back, of course.
- pythonaut_16 8y agoWell of course not, all of the ISP's routers were already bricked.