“It’s being reported by users from the DSLReports forum that the Puma 6 Intel cable modem variants are highly susceptible to a very low-bandwidth denial-of-service attack,” writes Slashdot reader Idisagree. The Register reports:
Effectively, if there’s someone you don’t like, and they are one of thousands upon thousands of people using a Puma 6-powered home gateway, and you know their public IP address, you can kick them off the internet, we’re told… According to one engineer…the flaw would be “trivial” to exploit in the wild, and would effectively render a targeted box useless for the duration of the attack… “It can be exploited remotely, and there is no way to mitigate the issue.”
This is particularly frustrating for Puma 6 modem owners because the boxes are pitched as gigabit broadband gateways: the devices can be potentially choked and knocked out simply by receiving traffic that’s a fraction of the bandwidth their owners are paying for… The Puma 6 chipset is used in a number of ISP-branded cable modems, including some Xfinity boxes supplied by Comcast in the US and the latest Virgin Media hubs in the UK.
The original submission also notes there’s already a class action lawsuit over the performance of cable modems with Intel’s Puma 6 chipset, and adds “It would appear the Atom chip was never going to live up to the task it was designed for.”
Read more of this story at Slashdot.