Thomson TCW690 Cable Modem Multiple Remote Vulnerabilities

vendor:

TCW690 Cable Modem

by:

SecurityFocus

7.5

CVSS

HIGH

Denial of Service and Unauthorized Access

CWE

Product Name: TCW690 Cable Modem

Affected Version From: ST42.03.0a

Affected Version To: ST42.03.0a

Patch Exists: YES

Related CWE: N/A

CPE: h:thomson:tcw690_cable_modem

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2005

Thomson TCW690 Cable Modem Multiple Remote Vulnerabilities

Thomson TCW690 cable modem is reported prone to multiple remote vulnerabilities. These issues may allow an attacker to cause a denial of service condition and/or gain unauthorized access to the device. The device is reported prone to a partial denial of service condition that results from a boundary condition error. Reportedly, a successful attack can cause the device to fail to process requests for a limited period of time. Another vulnerability affecting the modem can allow attackers to gain unauthorized access to the device. It is reported that the device does not properly verify users' authentication credentials when handling an HTTP POST request.

Mitigation:

Administrators are advised to apply the appropriate updates and/or patches to affected systems.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/12595/info

Thomson TCW690 cable modem is reported prone to multiple remote vulnerabilities. These issues may allow an attacker to cause a denial of service condition and/or gain unauthorized access to the device.

The following specific issues were identified:

The device is reported prone to a partial denial of service condition that results from a boundary condition error. Reportedly, a successful attack can cause the device to fail to process requests for a limited period of time. This issue may be related to BID 9091 (Thomson Cable Modem Remote Denial Of Service Vulnerability).

Another vulnerability affecting the modem can allow attackers to gain unauthorized access to the device. It is reported that the device does not properly verify users' authentication credentials when handling an HTTP POST request.

Thomson TCW690 with firmware version ST42.03.0a is reported vulnerable to these issues. It is possible that other versions are affected as well. 

http://www.example.com/AAAA[about 2000 A's]AAA