19-09-2012, 03:42 AM
(This post was last modified: 19-09-2012, 04:19 AM by PumaTechTV.)
(19-09-2012, 03:16 AM)ABMJR Wrote: The Public string is worthless to open up remote CM's and put them in factory mode and have them send their Certificates
Got it. So I would need to get the private string eh? Thanks I will search sbhacker and see what I come up with about getting the private string.
(03-09-2012, 03:55 PM)ABMJR Wrote: The Public String is read only and is passed from the ISP side to the Customer side. Again, it is read only
The private String is ISP side only and is never passed to the Customer side.
Private String is Write /Read. Full Control of the Network Elements (CM's)
Quote:Cisco Internetwork Operating System Software (IOS) could allow a remote attacker to obtain the cable-docsis read-write community string to reconfigure the Cisco device. This is caused by a vulnerability in the implementation of DOCSIS (Data Over Cable Service Interface Specification)-compliant standards. By default, the cable-docsis read-write community string is undocumented and enabled.
Again, CISCO IOS Firmware fixed the "flaw" and , again. And undocumented TELNET command.
P.S
I think I found the TELNET command to read the Private String in TELNET after registration.
I read over a post you posted here on this site. This just confused me even further. If the public string is read only, how is it worthless? Maybe i'm thinking of this the wrong way. If something is read only, that means you can make copies of it but not change the original file (just like read only files in usb's). In other words, the public key should allow me to retrieve the certs.
Anyways, I will still look for a way to find the private key. If anyone could point me in the right direction (to getting the private key; I already used the search function on SBHACKER and found nothing) , that would be greatly appreciated