Time Warner Cable SMC8014 Modem/Router Remote Access

October 21st, 2009 by Dev Team in News, Privilege Escalation, Wireless

A backdoor vulnerability in a Time Warner cable modem and Wi-Fi router deployed to 65,000 customers would allow a hacker to remotely access the device’s administrative menu over the web, and potentially change the settings to intercept traffic, according to a blogger who discovered the issue.
David Chen, said he was trying to help a friend change the settings on his cable modem and discovered that Time Warner had hidden administrative functions from its customers with Javascript code. By disabling Javascript in his browser, he was able to see those functions, which included a tool to dump the router’s config file.

That file, it turned out, included the administrative login and password in cleartext. Chen investigated and found the same login and password could access the admin panels for every router in the SMC8014 series on Time Warner’s network , given that the routers also expose their web interfaces to the internet.


One Response to ' Time Warner Cable SMC8014 Modem/Router Remote Access '

Subscribe to comments with RSS or TrackBack to ' Time Warner Cable SMC8014 Modem/Router Remote Access '.

  1. coby said,

    on November 13th, 2009 at 12:40 pm

    what does it cost

Leave a reply