Buffalo WBRG54 Wireless Broadband Router Remote Denial of Service Attack Vulnerability

Information provision:	Provide hotline: 51cto.editor@gmail.com
Vulnerability category:	Design Error
Attack type:	Denial of Service Attack
Release date:	2003-04-04-04
Updated on:
Affected Systems:	Buffalo Technology Wireless Broadband Router WBRG54 1.13 Buffalo Technology Wireless Broadband Router WBRG54 1.11
Security system:	None
Vulnerability Reporter:	Pavel shpac shpac@ru.ru)
Vulnerability description:	Bugtraq id: 7282 Buffalo WBRG54 is a router for wireless broadband. Buffalo WBRG54 has a problem when handling more than one ICMP packet. Remote attackers can exploit this vulnerability to launch DoS attacks on the device. According to a test by the Vulnerability discoverer, it uses 2 Broadband Router WBR-g54 (the first is: g54-01, the second is the g54-02), both of which are peering connections: [Atacker PC] -- [g54-01]-..-per-to-pear-..-[g54-02] -- [victim PC] If you submit a large number of ICMP packets (ping-f <victim IP> can be used in Linux) to the device, the connection may be disconnected and a denial of service may occur.
Test method:	None
Solution:	Vendor patch: Buffalo Technology ------------------ Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version: Http://www.buffalotech.com