CVE-2016-10372
CriticalSummary
The Eir D1000 modem does not properly restrict the TR-064 protocol, allowing remote attackers to execute arbitrary commands via TCP port 7547. This is demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature.
Risk Assessment
Attackers can remotely access critical modem functions, potentially leading to device takeover and leakage of sensitive information.
Recommendation
It is recommended to block access to TCP port 7547 and implement appropriate security measures to restrict access to the TR-064 protocol.
Original NVD description (English source)
The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature.