Cross-Site Request Forgery Vulnerabilities in Motorola Surfboard Modems
CVE-2008-2002

Currently unrated

Key Information:

Vendor
Motorola
Status
Surfboard
Vendor
CVE Published:
28 April 2008

Summary

The Motorola Surfboard modem with software version SB5100-2.3.3.0-SCM00-NOSH is susceptible to multiple cross-site request forgery vulnerabilities. An attacker can exploit these vulnerabilities to remotely initiate a denial of service by triggering a device reboot through the 'Restart Cable Modem' functionality or executing a hard reset by executing the 'Reset All Defaults' action. Both vulnerabilities interact through the BUTTON_INPUT parameter located in configdata.html, enabling unauthorized users to disrupt the device's normal operation.

References

http://securityreason.com/securityalert/3839
third-party-advisoryx_refsource_SREASON
http://www.vupen.com/english/advisories/2008/1390/references
vdb-entryx_refsource_VUPEN
http://www.rooksecurity.com/blog/?p=4
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.