Description
Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server.
References
- com21-doxport-config-file(10543) vdb-entry
- 1005524 vdb-entry
- 20021128 Lag Security Advisory - Com21 cable modem configuration file feeding vulnerability mailing-list