إرسال #113816: DoS attack on Netgear-SRX5308 Router

# DoS attack on Netgear-SRX5308 Router

## Overview

* Type: DoS
* Supplier: Netgear (https://www.netgear.com/)
* URL: https://192.168.1.1/scgi-bin/platform.cgi?page=firewall_logs_email.htm
* Product: SRX5308 – ProSAFE Quad WAN Gigabit SSL VPN Firewall
* Affect version: (lastest) 4.3.5-3
* Firmware download: https://www.downloads.netgear.com/files/GDC/SRX5308/SRX5308_V4.3.5-3.zip

## Description

One malformed request makes the router link down and cannot recover by rebooting. The device can be recovered only by resetting.

## Business Impact

This vulnerability is easily exploited with only one packet and can result in the affected devices linking down and can only recover from reset. Thus the vulnerability is very dangerous which could also result in reputational damage for the business through the impact on customers' trust.

## Steps to Reproduce

I have put the PoC (exp.py) in the attachments, configure several parameters, and execute it, you will see the router link down. The parameters are as below:
1. username, password: visit the device's web interface (default: admin, password).
2. device_web_ip: web IP address of the target device.

## Proof of Concept

After executing the PoC script, you will find the router link down. You can retry to visit the router's web through the browser, ping the router or telnet web service port(`telnet 192.168.1.1 443`) to check the device status.

• المصدر: ⚠️ https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17
• المستخدم: leetsun (UID 39457)
• ارسال: 13/04/2023 03:45 PM (3 سنوات منذ)
• الاعتدال: 28/04/2023 01:50 PM (15 days later)
• الحالة: تمت الموافقة
• إدخال VulDB: 227658 [Netgear SRX5308 حتى 4.3.5-3 الحرمان من الخدمة]
• النقاط: 20