lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 5 Apr 2012 12:03:46 GMT From: gab.mnunes@...il.com To: bugtraq@...urityfocus.com Subject: Sony Bravia Remote Denial of Service - CVE-2012-2210 # Exploit Title: Sony Bravia Remote Denial of Service # Date: 04/04/2012 # Author: Gabriel Menezes Nunes # Version: Sony Bravia TV # Tested on: Sony Bravia TV (KDL-32CX525) # CVE: CVE-2012-2210 Playing with my TV, I found a bug that can crash the device. Running a hping command against a Sony Bravia TV (KDL-32CX525), all the functions stop working instantly. You cannot change the volume, channels or access any function. Instantly. After 35 seconds the TV stop working and back. This happens 3 times. At fourth time, the TV shuts down. In less than 3 minutes, the TV is off remotely. It is necessary to turn on the TV physically. Attack: hping -S TV.IP.Address -p anyport -i u1 --flood Example: hping -S 10.0.0.3 -p 2828 -i u1 --flood
Powered by blists - more mailing lists