Modem network vulnerabilities and security testing — Actual threats

The article describes the endpoint security of xDSL modems (routers), outlines the set of tests performed by our team and provides test results. Described vulnerabilities can be exploited to perform a wide DoS attack against ISP's customers. The vulnerabilities have been identified in the Ethernet layer, IP platform layer and in the TCP protocol implementations. All described vulnerabilities can be mitigated by proper ISP configuration depending on the placement of a node in a network.