Denial of Service vulnerability in Scientific Atlanta DPX2100 cable modems

vendor:

DPX2100 cable modems

by:

Unknown

7.5

CVSS

HIGH

Denial of Service

400

CWE

Product Name: DPX2100 cable modems

Affected Version From: Unknown

Affected Version To: Unknown

Patch Exists: NO

Related CWE:

CPE: cpe:2.3:h:scientific_atlanta:dpx2100:-:*:*:*:*:*:*:*

Metasploit:

Other Scripts:

Platforms Tested:

Unknown

Denial of Service vulnerability in Scientific Atlanta DPX2100 cable modems

The Scientific Atlanta DPX2100 cable modems are prone to a denial of service vulnerability. Remote attackers can crash the affected devices or temporarily block further network routing functionality by sending TCP 'LanD' packets. This results in denial of network services to legitimate users.

Mitigation:

Unknown

Source

Exploit-DB raw data:

source: www.securityfocus.com/bid/15870/info

Scientific Atlanta DPX2100 cable modems are prone to a denial of service vulnerability.

These devices are susceptible to a remote denial of service vulnerability when handling TCP 'LanD' packets.

This issue allows remote attackers to crash affected devices, or to temporarily block further network routing functionality. This will deny further network services to legitimate users.

Scientific Atlanta DPX2100 cable modems are reportedly affected by this issue. Due to code reuse among devices, other devices may also be affected. 

The following Hping2 command is sufficient to crash affected devices. The IP addresses must both be configured on the targeted device:

hping2 -A -S -P -U 1.2.3.4 -s 80 -p 80 -a 192.168.1.1