Skip to main content

Backdoor In A Backdoor Discovered By Brazilian Security Researcher in ARRIS Modems

ARRIS TG 860


Bernardo Rodrigues, a Brazilian security researcher preparing to give a talk at the Nullbyte Security Conference on cable modem security has discovered a previously undisclosed backdoor within a backdoor that is present on some ARRIS cable modems. The backdoor affects many models including the TG862ATG862GDG860A. According to Bernardo, a search on Shodan, the world's first search-engine for interconnected devices (Internet of Things), reveals over 600,000 affected devices.


ARRIS TG 860
ARRIS TG 860

ARRIS TG 862
ARRIS TG 862


Does your modem look like either of the two above? If so, do read on as you might be affected by the new security flaw discovered.

The Backdoor In A Nutshell

The ARRIS Password of the Day is a backdoor that has been known since 2009 on many of ARRIS' small office home office cable modems. Based on a seed provided by your Internet Service Provider, which generates a "password of the day", it basically allows technicians to view and change your network settings remotely through a restricted technician's shell.

While analyzing how the earlier backdoor works, Bernardo discovered some interesting code in the authentication code, that allows you to get a full busybox shell when you log on to the Telnet/SSH session with the last 5 digits of your modem's serial number instead of the "password of the day". In other words, this is a backdoor within a backdoor. What makes this more disconcerting than the previous Password of the Day backdoor is that it grants attackers even more tools to access the modem, packet sniff and launch a sophisticated attack on your network.

What Now?

Bernardo, the security researcher, went public with this backdoor within a backdoor 65 days after reporting it and waiting to no avail for a fix. If you want a more detailed understanding of how the backdoors work, we encourage you to read his very informative blog post which includes some screen shots of the backdoor at work. 

The obvious question many people have is whether changing your modem a good solution? Given the mechanism of firmware/software updates and nature of remote diagnosis tools, we wouldn't be surprised if similar backdoors exist on other modems as well. The best thing you can do is to be aware and stay informed if and when the modem companies / ISPs patch these obvious security flaws. Pressuring them to get it fixed via social media might help too.

One additional step you can take if you're planning to buy a new modem, router or gateway, check with the customer support (especially if it's an ARRIS) if such a security loophole is present on the model you're intending to buy. It might not be perfect, but hey, at least you tried.    

Comments

Popular posts from this blog

Best Cables for 144Hz Monitors - DisplayPort

144Hz monitors have a few different inputs, like DisplayPort , Dual-link DVI and HDMI to choose from, but which is the most recommended one? We've definitely come a long way from the days when monitors offered only a single VGA port. This article will explain which is the recommended port and type of cable to use for your 144Hz monitor.

Big Home Routers | Best WiFi Routers for a 4000 sq ft House

One of the great frustrations of living in a large or multi-story house is that a single Wi-Fi router isn't able to cover the entire house. Even homes around 2,000 square feet in size are likely to be plagued by Wi-Fi dead spots. If you'd like to say goodbye to terrible Wi-Fi, this guide will explain what Wi-Fi mesh is - one of the most exciting router technologies to emerge in recent years and also highlight what are some of the best mesh routers on the market today.

Choose The Right DVI Cable | Can DVI Support 144 Hz?

Can DVI cables support video display at 144 Hz? Dual-link DVI-D and DVI-I cables can support Full-HD display at 144 Hz but the confusion arises because there are so many different types of DVI cables and not all of them are able to support the high bandwidth required. In this article, we'll cover some of the DVI basics like connector types, single-link vs dual-link and connecting to other display standards like VGA and HDMI as well as recommend some popular DVI cables.