CVE-2017-5693 PoC — Intel Puma 5、6和7系列安全漏洞

Source

Associated Vulnerability

Title: Intel Puma 5、6和7系列安全漏洞 (CVE-2017-5693)
Description:Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a denial of service via crafted network traffic.

Description

CVE-2017-5693 Denial of service vulnerability in Puma 6 modems

Readme

# Puma 6 fail demo

Tool to demonstrate issue from this post found by mackey: https://www.dslreports.com/forum/r31377755-

Proof of concept code is [already public](https://www.theregister.co.uk/2017/04/27/intel_puma6_chipset_trivial_to_dos/) elsewhere.

See [CVE-2017-5693](https://nvd.nist.gov/vuln/detail/CVE-2017-5693).

DoS occurs in either direction - UDP from LAN to WAN or WAN to LAN.

Testing through a local Virgin Media Super Hub 3 modem:

    1mbps/2000pps   causes ~20ms average latency rise with 200 maximum
    2mbps/4000pps   causes ~200ms average latency and 65% packet loss
    3mbps/6000pps   causes ~250ms average latency and 85% packet loss

![Smokeping graph while testing](https://i.imgur.com/eshENJE.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →