{"id":32716,"date":"2020-01-10T18:21:35","date_gmt":"2020-01-10T18:21:35","guid":{"rendered":"http:\/\/50deabb1-1afd-4ec1-aee7-b220b7ad59f3"},"modified":"2020-01-10T18:21:35","modified_gmt":"2020-01-10T18:21:35","slug":"hundreds-of-millions-of-cable-modems-are-vulnerable-to-new-cable-haunt-vulnerability","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/hundreds-of-millions-of-cable-modems-are-vulnerable-to-new-cable-haunt-vulnerability\/","title":{"rendered":"Hundreds of millions of cable modems are vulnerable to new Cable Haunt vulnerability"},"content":{"rendered":"

\"cable-haunt.jpg\"<\/span><\/p>\n

A team of four Danish security researchers has disclosed this week a security flaw that impacts cable modems that use Broadcom chips.<\/p>\n

The vulnerability, codenamed Cable Haunt, is believed to impact an estimated 200 million cable modems in Europe alone, the research team said today.<\/p>\n

Cable Haunt impacts Broadcom spectrum analyzers<\/h3>\n

The vulnerability impacts a standard component of Broadcom chips called a spectrum analyzer. This is a hardware and software component that protects the cable modem from signal surges and disturbances coming via the coax cable. The component is often used by internet service providers (ISPs) in debugging connection quality.<\/p>\n

On most cable modems, access to this component is limited for connections from the internal network.<\/p>\n

The research team says the Broadcom chip spectrum analyzer lacks protection against DNS rebinding attacks, uses default credentials, and also contains a programming error in its firmware.<\/p>\n

Researchers say that by tricking users into accessing a malicious page via their browser, they can use the browser to relay an exploit to the vulnerable component and execute commands on the device.<\/p>\n

Using Cable Haunt, an attacker could:<\/p>\n