Researchers discovered as critical vulnerability dubbed Cable Haunt affects cable modems from different manufacturers across the globe.
The vulnerability enables a remote attacker to gain complete control over the modem through its endpoint.
Successful exploitation allows attackers to intercept private messages, redirect traffic, or participate in botnets.
Cable Haunt vulnerability was discovered by a team of Danish security researchers in Broadcom cable modems.
It affects multiple vendors as the same software being used by various cable modem manufacturers to create their cable modem firmware.
All the traffic goes through the cable modem middleware (CM), by gaining control over it attackers can manipulate any traffic going through the modem.
The attack is a two-step process: An attacker should gain access to the vulnerable endpoints through local networks such as browsers, this can be done by making the victim opening a malicious link in a browser.
The exploit not only the browser, but it can also be executed in any place where running the code can reach IP on the local network.
Once the code executed attackers can gain complete control over the modem and can perform various operation such as
Researchers estimated that “more than 200 million modems may be or might have been vulnerable in Europe alone and there is no way to track the vulnerability spread”.
Here is the list of vulnerable modems:
As the cable Haunt allows attackers to gain complete access to the modem it is hard to detect the infection as the attacker can hide the tracks.
Researchers also stated that there is no evidence of active exploitation, and this attack doesn’t break SSL/TLS encryption.
A tool has been released to check whether your modem is vulnerable, the tool can be downloaded from here.
Here you find the detailed Technical report explaining the Cable Haunt vulnerability and the PoC of the attack.
fullzshop fullz for sale