ScMM DSL Modem/Router Backdoor Detection

Critical Nessus Plugin ID 71807

Synopsis

The remote device contains a backdoor.

Description

The remote device is a DSL Modem/Router with a backdoor running on port 32764. It is possible for an attacker to run arbitrary commands or access configuration details (including passwords) on the device.

Solution

Contact the device vendor regarding the availability of an update.

See Also

https://github.com/elvanderb/TCP-32764

http://www.nessus.org/u?00871716

Plugin Details

Severity: Critical

ID: 71807

File Name: scmm_backdoor.nasl

Version: 1.13

Type: remote

Family: Backdoors

Published: 2014/01/06

Modified: 2018/06/14

Dependencies: 17975

Risk Information

Risk Factor: Critical

CVSSv2

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 2013/12/21

Exploitable With

Metasploit (SerComm Device Remote Code Execution)

Reference Information

CVE: CVE-2014-0659

BID: 64675, 64776, 65007