COMMAND
Modem
SYSTEMS AFFECTED
Eicon Diehl LAN ISDN Modem
PROBLEM
Bjorn Stickler found following. He recently found a security bug
in the diva lan isdn modem that shuts down the modem (fault led
on). All you have to do is type the following location in your
browser:
http://diva/login.htm?password=0123456789012345678901234567890123456789
where diva is the name of your modem or the ip-address. After
that, the modem is locked until you do a hard reset.
SOLUTION
1. In the default configuration this attack can only be performed
from the local network, and *not* from the Internet.
2. Eicon has released a new firmware which fixes this issue
completely. New versions of the Diva Lan modem are already
shipped with the new firmware, and current users can download
the new firmware from Eicon's web site.