A security issue has been reported in Thomson TWG850 Cable Modem, which can be exploited by malicious people to bypass certain security restrictions.
The security issue is caused due to missing authentication within the web-based management interface when processing requests with the "/goForm" URL. This can be exploited to alter any configuration setting via HTTP POST requests.
The security issue is reported in version ST9A.01.05 and ST9A.01.06. Other versions may also be affected.
Solution: Update to version ST9A.01.12.
Provided and/or discovered by: Glafkos Charalambous and George Nicolaou
Original Advisory: http://dl.packetstormsecurity.net/1209-exploits/thomson-bypass.txt
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this
information to email@example.com