Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:CVE-2016-10372-CMD-IN |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Eir D1000 DSL Modem NewNTPServer Command Injection |
Release Date |
2019/02/03 |
Update Number |
3139 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Eir D1000 DSL Modem NewNTPServer Command Injection
This signature detects attempts to exploit a known vulnerability against Eir D1000 DSL Modem NewNTPServer. Successful attack could lead to Command Injection.
Extended Description
The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature.
Affected Products
- Eir d1000_modem_firmware -
References