Security Flaws in Two Popular TV Set-Top Boxes Expose Customers to Attack

guest · Aug 28, 2020

Security Flaws in Two Popular TV Set-Top Boxes Expose Customers to Attack
August 26, 2020
https://www.infosecurity-magazine.com/news/security-flaws-tv-set-top-expose/

Serious security flaws have been discovered in two popular TV set-top boxes, potentially leaving customers at risk cyber-attack. According to an investigation by Avast, the THOMSON THT741FTA and Philips DTR3502BFTA devices contain vulnerabilities that can allow them to be accessed remotely by malicious actors, who can then launch botnet and ransomware attacks.

The internet-connected set-top boxes are often purchased by consumers who have television sets that do not support DVB-T2, the most up-to-date digital signal for terrestrial television.
Click to expand...

The investigators found that both Internet of Things (IoT) devices are shipped by their manufacturers with open telnet ports, an unencrypted protocol used for communicating with remote devices or servers. This could allow cyber-criminals to launch attacks such as DDoS using botnets, with the Avast team successfully executing the binary of the Mirai botnet to both devices.
Click to expand...

Avast: Flaws in DVB-T2 set-top boxes exposed

This post will reveal how two popular DVB-T2 devices can be recruited by cybercriminals, injected with malware and used as part of a large army of bots to launch attacks on networks. We’ll show their susceptibility to MiTM attacks for the distribution of ransomware on user TVs, and other weaknesses including DNS hijacking and persistent storage of malware payloads.
Click to expand...

CVEs
CVE-2020-11617
The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn’t validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to modify the data delivered to the client.
CVE-2020-11618
THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their telnet services hardcoded to start on boot, which allows an attacker on the local network to achieve root access via the telnet protocol.
Click to expand...

Log in or Sign up

Security Flaws in Two Popular TV Set-Top Boxes Expose Customers to Attack

guest Guest

Log in or Sign up

Security Flaws in Two Popular TV Set-Top Boxes Expose Customers to Attack

guest Guest

Useful Searches