Secunia

MurDoK has reported two vulnerabilities in Thomson TCW690 Cable Modem, which can be exploited by malicious people to cause a DoS (Denial of Service) and bypass certain security restrictions.

1) A boundary error in the HTTP interface can be exploited to cause the cable modem to become temporarily unstable by sending an overly long HTTP request (about 2000 bytes) to the HTTP interface.

Example:
http://[victim]/AAA...[x2000]...AAA

This is similar to:
SA10286

2) An error in the authorisation process can be exploited to gain administrative access without supplying a password via a specially crafted POST request.

The vulnerabilities have been reported in software version ST42.03.0a. Other versions may also be affected.

Solution
Restrict access to the HTTP interface.

Provided and/or discovered by
MurDoK

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area