News for hackers. Stuff that matters.

A comment on Cable Haunt: A critical vulnerability found in cable modems. Parent comment

Re:Cable Haunt: A critical vulnerability found in cable modems by edf13 on Monday January 13, 2020 @06:13AM (#22033457)
There are considerable attack vectors opened up here... a quick glance at the front page shows:

> Change default DNS server > Conduct remote man-in-the-middle attacks > Hot-swap code or even the entire firmware > Upload, flash, and upgrade firmware silently > Disable ISP firmware upgrade > Change every config file and settings > Get and Set SNMP OID values > Change all associated MAC Addresses > Change serial numbers > Be exploited in botnet

A simple change in DNS servers combined with man-in-the-middle attacks is enough to fool many people into entering CC details into rogue sites for example.

(Edit for typos!)

[ Parent | on HN ]
Re:Cable Haunt: A critical vulnerability found in cable modems by jonhendry18 on Friday January 17, 2020 @11:01AM (#22075755)
"A simple change in DNS servers "

Would this matter if the devices on the network are all themselves configured to use other DNS servers?

[ Parent | on HN ]