Cisco Content Service Switch 11000 Series Web Management Vulnerability 4. By spoofing IRDP Router Advertisements, an attacker can remotely add default route entries to a remote system. The default route entry added by the attacker will be preferred over the default route obtained from the DHCP server. SunOS systems will also intentionally use IRDP under specific conditions. The tool provided with this advisory is the basis of what would be used for everything from web page hacks, stealing credentials, modifying or altering data, etc. involving vulnerable systems.
Most cable modem DHCP clients and large internal organizations are at risk .
MacOS clients are not vulnerable to this sort of attack. The ICMP Router Discovery Protocol does not have any form of authentication, making it impossible for end hosts to tell whether or not the information they receive is valid. This will allow them to monitor or record one side of the conversation. For this to work, and attacker must be on the same network as the victim. Taking the above attack to the next level, the attacker would also be able to modify any of the outgoing traffic or play man in the middle.