Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

LG LR Series WAN Router Data Stream Denial Of Service Vulnerability

The LR series WAN routers are hardware and firmware solutions manufactured and distributed by LG Electronics.

It has been discovered that when a stream of data is sent to the router on certain ports, the router becomes unstable. By sending a stream of data to port 23/TCP (and also port 80/TCP on some models), which is accessible by default, the router reacts unpredictably. This type of attack typically results in a crash of the router.

It has been theorized that this issue is a bug in the TCP/IP stack of the device, and possibly an exploitable buffer overflow.







 

Privacy Statement
Copyright 2008, SecurityFocus