Cable Haunt


Cable Haunt is the code name assigned to represent two separate vulnerabilities that impact many of the cable modems in use around the world today. These vulnerabilities allow an attacker to obtain external access to a cable modem and perform any number of activities intended to modify the operation of, or monitor the data passing through a cable modem.
The problem lies with the Broadcom system-on-a-chip, which is used in many cable modems. Specifically with the software running the spectrum analyzer, which protects against any power surges in the cable signal. It exposes an unsecured WebSockets interface that Cable Haunt can reach using JavaScript.
Modems impacted by Cable Haunt could allow remote attackers to potentially:
Most home and small businesses obtain their cable modems directly from their internet service providers. In situations where ISPs control the patching and firmware updating processes, subscribers must wait for cable providers to receive updated firmware from manufacturers and push it down to each individual modem. Initially cable companies were slow to respond to this threat, but now are actively working to get updates for customers.
On January 19, 2019 Schrock Innovations, a computer repair company based in Lincoln, Nebraska released executable programs for x64 Windows systems and OSX systems based on Lyrebirds' original javascript. These programs allowed less technically advanced users the ability to test their own connections. Users of the programs were instructed to contact their ISP if their modem was vulnerable in order to increase public pressure for patches to be created in order to address the vulnerability.