CVE-2008-2092

Linksys SPA-2102 Phone Adapter 3.3.6 - Denial of Service via Long Ping Packet

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2092. PoCs published by sipherr.

AI-analyzed exploit summary This exploit leverages a denial-of-service vulnerability in Linksys SPA-2102 Phone Adapter by sending oversized ICMP packets. The PoC uses a simple ping command with a large packet size to crash the device's control center.

Description

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: the severity of this issue has been disputed since there are limited attack scenarios.

Exploits (1)

exploitdb WORKING POC VERIFIED

by sipherr · textdoshardware

https://www.exploit-db.com/exploits/31478

View Code ZIP pw:eip

This exploit leverages a denial-of-service vulnerability in Linksys SPA-2102 Phone Adapter by sending oversized ICMP packets. The PoC uses a simple ping command with a large packet size to crash the device's control center.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Linksys SPA-2102 Phone Adapter running firmware 3.3.6

No auth needed

Prerequisites: Network access to the same LAN as the target device

MITRE ATT&CK