Detections
Analytics

ScMM DSL Modem/Router Backdoor Detection

critical Nessus Plugin ID 71807

Language:

Synopsis

The remote device contains a backdoor.

Description

The remote device is a DSL Modem/Router with a backdoor running on port 32764. It is possible for an attacker to run arbitrary commands or access configuration details (including passwords) on the device.

Solution

Contact the device vendor regarding the availability of an update.

See Also

https://github.com/elvanderb/TCP-32764

http://www.nessus.org/u?b9d609e8

Plugin Details

Severity: Critical

ID: 71807

File Name: scmm_backdoor.nasl

Version: 1.15

Type: remote

Family: Backdoors

Published: 1/6/2014

Updated: 11/28/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 12/21/2013

Exploitable With

Metasploit (SerComm Device Remote Code Execution)

Reference Information

CVE: CVE-2014-0659

BID: 64675, 64776, 65007