HOTBOX Multiple Vulnerabilities скачать в хорошем качестве

HOTBOX Multiple Vulnerabilities

Intro ==== HOTBOX is the leading router/modem appliance of HOT Cable communication company in israel. The Appliance is manufactured by SAGEMCOM and carries the model name F@st 3184. Title ==== HOTBOX Multiple Vulnerabilities Advisory Information =============== Vendors Contacted: HOT Cable communication Vendor Patched: N/A System Affected: HOTBOX Router/Modem Versions Affected: 2.1.11 , possibly earlier CVE Numbers Assigned: CVE-2013-5037, CVE-2013-5038 CVE-2013-5220, CVE-2013-5219, CVE-2013-5218, CVE-2013-5039. Classification: 0-day Vulnerabilities Description =================== Default WPS Pin - 12345670 (Cannot be changed and comes by default). Authentication based on IP Address (Attacker can change the IP Address to a one that already performed authentication and gain access). DoS via crafted POST (Web server cannot handle custom HTTP POST request) Path/Directory Traversal (It is possible to view critical files on the file system). Script injection via DHCP request (Clients web page does not sanitize host-name field). No CSRF Token (Attacker can perform any action remotely on the web application with simple interaction of authenticated user). Proof of Concept: ============ http://elisyan.com/hotbox/hotboxDoS.pl, http://elisyan.com/hotbox/hotboxCSRF.... Report Timeline: =========== 2013-09-09: Vendor notified about the vulnerabilities with all the relevant technical information. 2013-09-12: Vendor respond that the vulnerabilities presented could not be performed and the customers are not vulnerable 2013-09-12: Vendor notified again about the severity of the issues and a period of 2 months was given. Credits: ====== The Vulnerabilities was discovered and researched by Oz Elisyan.