Hacker News Reader

Speaking of rebooting vulnerabilities, I'm reminded of the CSRF vulnerability in the popular Motorola SB6141 modem. Not only can, say, a embedded resource in a forum reboot your modem, it can also request reprovisioning, which can take you offline for up to half an hour. It's been fixed, at least by my local TWC, but I wonder if all ISPs have rolled out the firmware update.

https://www.securityforrealpeople.com/2016/04/arris-motorola...

View on HN

For the record, a popular ISP in my country designed its own router, which uses shell commands to compute the password hash, without even attempting to sanitize input[1].

If you have access to the login page (and until recently, it was also available via WAN) you could do all fancy tricks by putting the right commands in the password field, including bricking the equipment itself.

[1] https://github.com/Nimayer/fastgate-toolkit/wiki/Get-a-root-...

People tried to contact the ISP and got no response back, of course.

Well of course not, all of the ISP's routers were already bricked.

Reply on news.ycombinator.com