Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Anyone see this report?
3 views
Skip to first unread message
Current Resident
Oct 26, 2009, 6:08:10 PM10/26/09
to
"Wired is reporting on a simple hack putting some 65,000 customers at risk.
The hack to gain administrative access to the cable modem/router combo is
remarkably simple: '[David] Chen, founder of a software startup called
Pip.io, said he was trying to help a friend change the settings on his cable
modem and discovered that Time Warner had hidden administrative functions
from its customers with Javascript code. By simply disabling Javascript in
his browser, he was able to see those functions, which included a tool to
dump the router's configuration file. That file, it turned out, included the
administrative login and password in cleartext. Chen investigated and found
the same login and password could access the admin panels for every router
in the SMC8014 series on Time Warner's network - a grave vulnerability,
given that the routers also expose their web interfaces to the public-facing
internet.' If you use Time Warner's SMC8014 series cable modem/Wi-Fi router
combo, watch for firmware to be released soon that they are reportedly in
the process of testing."
The hack to gain administrative access to the cable modem/router combo is
remarkably simple: '[David] Chen, founder of a software startup called
Pip.io, said he was trying to help a friend change the settings on his cable
modem and discovered that Time Warner had hidden administrative functions
from its customers with Javascript code. By simply disabling Javascript in
his browser, he was able to see those functions, which included a tool to
dump the router's configuration file. That file, it turned out, included the
administrative login and password in cleartext. Chen investigated and found
the same login and password could access the admin panels for every router
in the SMC8014 series on Time Warner's network - a grave vulnerability,
given that the routers also expose their web interfaces to the public-facing
internet.' If you use Time Warner's SMC8014 series cable modem/Wi-Fi router
combo, watch for firmware to be released soon that they are reportedly in
the process of testing."
Ron
Oct 30, 2009, 10:04:02 AM10/30/09
to
I bet by now one can Google that Username/Password combo.
tbone55
Feb 25, 2011, 7:14:34 PM2/25/11
to
Ever heard of cable hacking?
0 new messages