CableTap: Wirelessly Tapping Home Networks
Critical vulnerabilities in ISP-provided gateways enabling wireless interception of all network traffic.
Summary
ISP Gateway Vulnerabilities
Critical vulnerabilities in RDK-based wireless gateways and set-top boxes from vendors including Cisco, Arris, Technicolor, and Motorola impact millions of ISP customers.
Remote Exploitation
Research shows that it was possible to remotely and wirelessly tap all Internet and voice traffic passing through affected gateways. Without direct Internet access, attackers can impersonate legitimate ISP customers and access public hotspots.
Multiple Attack Vectors
Root shell access can be gained through methods beyond traditional web vulnerabilities. Options include generating hidden Wi-Fi network passphrases and logging into web UIs with hard-coded credentials.
Vendor Response
The presentation covers technical specifics of exploits discovered. Remediation actions taken by affected vendors and guidance for users is provided. Attack chain examples demonstrate real-world exploitation impact.
Related talks
Black Hat·45 min
Radu Motspan · Mikhail Evdokimov · Polina Smirnova
Engineers explore architecture and security mechanisms for Remote Exploitation of Nissan Leaf: Controlling Critical Body Elements from the Internet.
Black Hat·52 min
Engineers explore architecture and security mechanisms for Remote Exploitation Of An Unaltered Passenger Vehicle.
CREST Videos·26 min
Breaking into the Driver’s Seat: A Case Study on the Remote Exploitation of Honda Cars (CRESTCon).