CVE-2017-5693 PoC — Intel Puma 5、6和7系列安全漏洞

Description

CVE-2017-5693 Denial of service vulnerability in Puma 6 modems

介绍

# Puma 6 fail demo

Tool to demonstrate issue from this post found by mackey: https://www.dslreports.com/forum/r31377755-

Proof of concept code is [already public](https://www.theregister.co.uk/2017/04/27/intel_puma6_chipset_trivial_to_dos/) elsewhere.

See [CVE-2017-5693](https://nvd.nist.gov/vuln/detail/CVE-2017-5693).

DoS occurs in either direction - UDP from LAN to WAN or WAN to LAN.

Testing through a local Virgin Media Super Hub 3 modem:

    1mbps/2000pps   causes ~20ms average latency rise with 200 maximum
    2mbps/4000pps   causes ~200ms average latency and 65% packet loss
    3mbps/6000pps   causes ~250ms average latency and 85% packet loss

![Smokeping graph while testing](https://i.imgur.com/eshENJE.png)

文件快照

备注