dslreports logo
 story category
Puma 6 Flaw Lets Attackers Bog Down Impacted Modems, Gateways

Intel's busted Puma 6 cable modem chipset is the gift that just keeps on giving. We'd already pointed out how the chipset has been causing all manner of latency and connectivity issues for users, resulting in a lawsuit against Arris. And while the flaw still hasn't been fixed, users in our forums have noted another problem caused by the flaw: devices that use the Intel Puma 6 chipset can be knocked offline using a relatively trivial attack (ab)using the chipset issues.

Click for full size
User mackey spent some time experimenting with the DSLReports cable modem Puma 6 test, and discovered that users with gateways embedded with the chipset can be taken completely offline by sending a low bandwidth stream of UDP or TCP packets to different ports of impacted devices.

More specifically, users in our forums note that three to six thousand small, even zero-size, TCP or UDP packets sent to impact devices exhausts an internal lookup table in the chipset, slowly the entire device's performance as the hardware's CPU struggles under what should ordinarily be a modest load.

Ironically, many of the impacted devices are advertised as next-generation products capable of gigabit speeds, yet can be completely disabled with just a small trickle of data. The attack can be conducted remotely, and impacted devices will remain offline for the duration of the attack. And again, this was on top of the performance issues already being experienced by owners of these flawed devices.

It's still not entirely clear how many devices are impacted by the Puma 6 chipset flaw, but Netgear has issued a statement saying it's aware of the problem in its CM700 gateway.

"NETGEAR is aware of a security vulnerability that can potentially allow an attacker to slow or stop your network access," says the company. "This vulnerability does not pose a risk for data loss or access to your network. No workaround is available at this time. NETGEAR is working to evaluate this vulnerability and will update this knowledge base article as more information becomes available."

All told, the Puma 6 flaw appears to be the gift that just keeps on giving, and hardware vendors now face more pressure than ever to actually do something about it. There's significantly more detail in our user forums.

Most recommended from 56 comments



isp10002
join:2012-10-24
·Armstrong
ARRIS CM3200
Netgear WNDR3400

isp10002

Member

Recall Those POS Modems!

There is no doubt these Puma 6 modems are a POS. So many problems with the thing. This is going to cost ISP'S lots of money... and some ISP's force you to use their modem and in turn, some ISP's only provide puma 6 modems only like my isp does. So I'm basically boned.

ILpt4U
Premium Member
join:2006-11-12
Du Quoin, IL
·Mediacom
ARRIS TM822
Asus RT-N66

ILpt4U

Premium Member

Hello, Cable ISPs?!?

Why haven't the Comcasts, Charters, and Altices of the world done more about this?

Like get all PUMA 6 models out of their Leased inventory, and make customer owned devices with PUMA 6 either outright disallowed or "Use at your own risk" and unsupported.

Big Cable should have a lot of power in this case. Not absolving Intel, Arris, Netgear, or any other Manufacturers using the chips - but the Cable ISPs know the flaws/defects, and keep using the devices

How about ..