| पदवी | DoS attack on Netgear-SRX5308 Router |
|---|
| वर्णन | # DoS attack on Netgear-SRX5308 Router
## Overview
* Type: DoS
* Supplier: Netgear (https://www.netgear.com/)
* URL: https://x.x.x.x/scgi-bin/platform.cgi?page=firewall_logs_email.htm
* Product: SRX5308 – ProSAFE Quad WAN Gigabit SSL VPN Firewall
* Affect version: (lastest) 4.3.5-3
* Firmware download: https://www.downloads.netgear.com/files/GDC/SRX5308/SRX5308_V4.3.5-3.zip
## Description
One malformed request makes the router link down and cannot recover by rebooting. The device can be recovered only by resetting.
## Business Impact
This vulnerability is easily exploited with only one packet and can result in the affected devices linking down and can only recover from reset. Thus the vulnerability is very dangerous which could also result in reputational damage for the business through the impact on customers' trust.
## Steps to Reproduce
I have put the PoC (exp.py) in the attachments, configure several parameters, and execute it, you will see the router link down. The parameters are as below:
1. username, password: visit the device's web interface (default: admin, password).
2. device_web_ip: web IP address of the target device.
## Proof of Concept
After executing the PoC script, you will find the router link down. You can retry to visit the router's web through the browser, ping the router or telnet web service port(`telnet x.x.x.x 443`) to check the device status. |
|---|
| उगम | ⚠️ https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17 |
|---|
| उपयोगकर्ता | leetsun (UID 39457) |
|---|
| आधीनता | 13/04/2023 03:45 PM (3 वर्षानुवर्षे ago) |
|---|
| नेमस्तपणा | 28/04/2023 01:50 PM (15 days later) |
|---|
| स्थान | मान्य केले |
|---|
| VulDB entry | 227658 [Netgear SRX5308 जोपर्यंत 4.3.5-3 सेवा नाकारली] |
|---|
| मुद्दे | 20 |
|---|