ScMM DSL Modem/Router Backdoor Detection

Critical Nessus Plugin ID 71807


The remote device contains a backdoor.


The remote device is a DSL Modem/Router with a backdoor running on port 32764. It is possible for an attacker to run arbitrary commands or access configuration details (including passwords) on the device.


Contact the device vendor regarding the availability of an update.

See Also

Plugin Details

Severity: Critical

ID: 71807

File Name: scmm_backdoor.nasl

Version: $Revision: 1.10 $

Type: remote

Family: Backdoors

Published: 2014/01/06

Modified: 2016/05/13

Dependencies: 17975

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 9.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:U/RC:ND

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 2013/12/21

Exploitable With

Metasploit (SerComm Device Remote Code Execution)

Reference Information

CVE: CVE-2014-0659

BID: 64675, 64776, 65007

OSVDB: 101653

CISCO-BUG-ID: CSCum37566, CSCum43685, CSCum43693, CSCum43700

CISCO-SA: cisco-sa-20140110-sbd