21st Century Learning and Teaching

135 million Arris modems are at risk of being knocked offline for between three and 30 minutes, because of an easily patchable vulnerability.

Security researcher David Longenecker explains that the SB6141 model Arris (formerly Motorola) SURFboard modem, one of the most popular cable modems in the world with 135 million currently in production, is vulnerable to unauthenticated reboot attacks due to two flaws.

The first issue is quite basic: the user interface for the modem has absolutely no authentication set up. Astonishingly, this allows a local attacker to look up 192.168.100.1 and access the administration web interface without entering a username and password.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/securite-pc-et-internet/?tag=Router