Comes with ethernet cables and power cables. Comments are closed for this story. Don’t worry root, we’re coming for you! Supports voice telephony as well. For parts or not working.

Uploader: Brarisar
Date Added: 14 November 2004
File Size: 54.72 Mb
Operating Systems: Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X
Downloads: 41539
Price: Free* [*Free Regsitration Required]

Still, what an interesting attack vector, we thought.

Below is the Nmap output of services listening on the default IP address: Touchstone Cable Modem Series: Device Type see all. The successful response also indicates our assumption is likely correct and that the user root is running the Quagga daemon.

Arris Touchstone CM550 User Manual: Connecting The Cable Modem

The repository had firmware images for popular cable modems. It looks like our ISP has changed the seed. Separately, we had noted the existance of several symlinks within the web root that pointed to writable directories. We stand behind our products and sales with integrity and professionalism.

ARRIS Touchstone CM550A DOCSIS 2.0 Cable Modem

It is our understanding that ISPs have the ability to change this password on a daily basis if they so desire. TGG TG with battery.


Hello, this is Quagga version 0. The search went on for quite some time. The disclosure process was pretty routine.

CrackMeIfYouCan and thatguylevel for new vulnerabilities and exploitation techniques! This is for a lot of 2 – Arris DG It doesn’t follow the same structure as those discussed in the w00tsec research. Since we have yet to see an embedded device properly segment user privilege, we make these assertions based upon the assumption that the user running the Quagga daemon is root.

By continuing to browse, you are agreeing to our use of cookies as explained in our Privacy Policy. The firmware images and supporting documentation within the repository listed above vanished during our disclosure process.

After further testing, we confirmed that file permissions and read-only mounted filesystems heavily restrict the locations where writes are allowed. Personally, we only believe in what can be measured and this meant our hands needed to get dirty Go ahead and telnet to port One works normally and the other the wifi is not working on it.

HTTP request sent, awaiting response This included sales, field technicians, and customer support at various escalation levels.


Connecting The Cable Modem – Arris Touchstone CM User Manual [Page 15]

News Blog Facebook Twitter Newsletter. First we logged into Quagga: We also assert that the logging mechanism can be abused to allow for meaningful writes.

He is a lifelong computer geek and loves everything related to computers, software, and new technology. Guaranteed Delivery see all. In this particular case, it has been implemented on the cable modem to facilitate route provisioning from ISP onto the public internet. Skip to main content. There are several layers of privilege, though there are no restrictions on elevation – knowing the right commands is enough.

A service listening on port is usually associated with Quagga.

Connection Type see all.