Secunia

A vulnerability has been reported in Thomson TCM315 Cable Modem, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is reportedly caused due to a boundary error in the HTTP interface. This can be exploited to crash the cable modem by sending an overly long HTTP request (about 100 bytes) to the HTTP interface.

Example:
http://[victim]/AAA...[x100]...AAA

The vulnerability has been reported in TCM315 software version MP ST31.04.00 model A801. Other versions may also be affected.

Solution
Filter traffic to the cable modem's HTTP interface.

Provided and/or discovered by
Andrés Tarascó

Original Advisory
Thomson Cablemodem TCM315 Denial of Service:
http://www.shellsec.net/leer_advisory.php?id=2

Deep Links
Links available in Customer Area