Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2010-1544

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

RCA DCM425是一款宽带有线调制解调器。 RCA DCM425电缆调制解调器的micro_httpd存在远程拒绝服务漏洞。远程攻击者可以通过向DCM425 modem默认监听于80/TCP端口上的micro_httpd服务发送超长请求报文导致设备重启。

AI Predicted 7.5 Difficulty: Trivial EPSS 2.62% · P85

Public Exploits 1

ExploitDB · 1 EDB-11597 [dos]

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2010-1544

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a long string to TCP port 80.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
RCA DCM425调制解调器micro_httpd远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RCA DCM425是一款宽带有线调制解调器。 RCA DCM425电缆调制解调器的micro_httpd存在远程拒绝服务漏洞。远程攻击者可以通过向DCM425 modem默认监听于80/TCP端口上的micro_httpd服务发送超长请求报文导致设备重启。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2010-1544

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-1544

请登录查看更多情报信息。

Vendor Advisories for CVE-2010-1544 (2)

Exploits & Public PoCs for CVE-2010-1544 (1)

Same Patch Batch · n/a · 2010-04-26 · 17 CVEs total

CVE-2010-1536 Drupal AddThis Button模块跨站脚本攻击漏洞
CVE-2010-1537 PhpCDB'lang_global'多个目录遍历漏洞
CVE-2010-1538 Bluestrikeweb phpRAINCHECK 'id' 参数SQL注入漏洞
CVE-2010-1539 Drupal Workflow 模块跨站脚本攻击漏洞
CVE-2010-1540 Myblog 'com_myblog'组件'task'参数本地文件包含漏洞
CVE-2010-1541 Dragonfrugal DFD Cart多个跨站脚本攻击漏洞
CVE-2010-1542 Dragonfrugal DFD Cart 'admin/configure.php'跨站请求伪造漏洞
CVE-2010-1543 eTracker模块URI跨站脚本攻击漏洞
CVE-2010-1528 Uiga Proxy'template.php'PHP远程文件包含漏洞
CVE-2010-1529 Freestyle FAQ Lite组件'faqid'参数SQL注入漏洞
CVE-2010-1530 Reyero Internationalization模块多个跨站脚本攻击漏洞
CVE-2010-1531 Redcomponent redSHOP组件目录遍历漏洞
CVE-2010-1532 givesight PowerMail Pro组件目录遍历漏洞
CVE-2010-1533 Joomla! TweetLA (com_tweetla)组件目录遍历漏洞
CVE-2010-1534 Joomla! Shoutbox Pro (com_shoutbox)组件目录遍历漏洞
CVE-2010-1535 Joomla! TRAVELbook (com_travelbook) 组件目录遍历漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2010-1544

No comments yet


Leave a comment