Go Back   English Forum Switzerland > Help & tips > TV/internet/telephone  
Reply
 
Thread Tools Display Modes
  #21  
Old 06.04.2011, 17:02
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

There are other Security issues with this modem.

I strongly suggest disabling the wireless interfaces. All of them.

There is a hidden second wireless network.

It is enabled by default when Wireless Access is enabled
You can not turn it off, unless you switch off all Wireless Access
The SSID, although not transmitted, is “UPC_MultiMedia” and is present in all routers of this type.
This SSID can not be changed
The WPA encryptionkey can easily be obtained and is the same within all routers
The WPA encryptionkey can not be altered
Although you can not get to the modem control pages or to other computers in the network, you can reach internet.

UPC claim to have issued a fix, but the fix date is after my modem's firmware date, so CC are rolling this out without a fix.

There is no easily/visible method to update the firmware.This is an ISP friendly modem, not a home-friendly router.
Reply With Quote
  #22  
Old 06.04.2011, 17:11
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Re: New Cablecom WLAN/VOIP Router - Security warning.

Thanks for the manual, I've looked through it but couldn't find something about "bridge" mode...

See what i'm talking about :

http://sburke.eu/blog/2011/01/thomps...-model-twg870/
Reply With Quote
  #23  
Old 06.04.2011, 17:23
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
There are other Security issues with this modem.

I strongly suggest disabling the wireless interfaces. All of them.

There is a hidden second wireless network.

It is enabled by default when Wireless Access is enabled
You can not turn it off, unless you switch off all Wireless Access
The SSID, although not transmitted, is “UPC_MultiMedia” and is present in all routers of this type.
This SSID can not be changed
The WPA encryptionkey can easily be obtained and is the same within all routers
The WPA encryptionkey can not be altered
Although you can not get to the modem control pages or to other computers in the network, you can reach internet.

UPC claim to have issued a fix, but the fix date is after my modem's firmware date, so CC are rolling this out without a fix.

There is no easily/visible method to update the firmware.This is an ISP friendly modem, not a home-friendly router.
Many new dual band wifi AP/routers have the possibility to manage more than one SSID, for example one is on the 2.4Ghz band and another one on the 5Ghz. Then there are also "Guest" SSIDs.

Maybe you can't see the broadcast of “UPC_MultiMedia” it with your 2.4Ghz client (PCI, USB, PCMCIA card) because it's not on the same band...
Reply With Quote
  #24  
Old 06.04.2011, 17:24
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
Thanks for the manual, I've looked through it but couldn't find something about "bridge" mode...

See what i'm talking about :

http://sburke.eu/blog/2011/01/thomps...-model-twg870/
Wireless bridging only...
new-cablecom-wlan-voip-router-security-warning-modem-bridging.jpg
Reply With Quote
  #25  
Old 06.04.2011, 17:26
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
Many new dual band wifi AP/routers have the possibility to manage more than one SSID, for example one is on the 2.4Ghz band and another one on the 5Ghz. Then there are also "Guest" SSIDs.

Maybe you can't see the broadcast of “UPC_MultiMedia” it with your 2.4Ghz client (PCI, USB, PCMCIA card) because it's not on the same band...
Re-read. This is a known security flaw, not my observations. It is not for lack of experience or know-how.
Reply With Quote
  #26  
Old 06.04.2011, 17:33
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
UPC claim to have issued a fix, but the fix date is after my modem's firmware date, so CC are rolling this out without a fix.

There is no easily/visible method to update the firmware.This is an ISP friendly modem, not a home-friendly router.
It doesn't surprise me, this is a new device for cablecom after all.

I guess they'll push firmware updates via their network like for the past devices, no ?

I really hope there will be an alternative to this modem, because without full bridging mode I won't go for it right now.
Reply With Quote
  #27  
Old 06.04.2011, 17:40
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Also port 161 is open. Open to all So CC use SNMP to manage the device maybe, but that port is easily exploited. This along with port 68 being open suggests Cablecom can take control and manage it. Be prepared to experience a reset to ISP defaults if they audit or scan their hardware and they decide not to like people messing around internally.

The SNMP description is "Thomson Wireless PacketCable Gateway E-MTA <<HW_REV: 1.0; VENDOR: Thomson; BOOTR: 2.3.0; SW_REV: STBA.01.31; MODEL: TWG870U"


The router is basically a 3Com Baseline Switch 2948-SFP
Reply With Quote
  #28  
Old 06.04.2011, 17:47
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Re: New Cablecom WLAN/VOIP Router - Security warning.

This is becoming like Swisscom Modems... everything is blocked by default and when you go to "Expert Mode" there's nothing expert behind it, in some of the Netopia you can't even configure a DynDNS, don't even think about updating it yourself...
Reply With Quote
  #29  
Old 06.04.2011, 18:03
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
This is becoming like Swisscom Modems... everything is blocked by default and when you go to "Expert Mode" there's nothing expert behind it, in some of the Netopia you can't even configure a DynDNS, don't even think about updating it yourself...
This modem is highly configurable.
Nothing blocked except port pass-through and no driver running for the USB port, effectively disabling it.

As configurable as the WNDR-3700 I run, even more so given the VOIP configurations etc
Reply With Quote
  #30  
Old 06.04.2011, 21:07
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Re: New Cablecom WLAN/VOIP Router - Security warning.

I've called Cablecom today and one of their tech support guy told me that you can get the "Ubee" model instead of the "Thompson" if you want a modem/bridge instead of modem/router.

When you order or migrate to the new subscription you have to tell the administrative personal that you would like the Ubee instead and it's all good.

At least there's an alternative.
Reply With Quote
  #31  
Old 06.04.2011, 22:11
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
I've called Cablecom today and one of their tech support guy told me that you can get the "Ubee" model instead of the "Thompson" if you want a modem/bridge instead of modem/router.

When you order or migrate to the new subscription you have to tell the administrative personal that you would like the Ubee instead and it's all good.

At least there's an alternative.
We had the Ubee and they told us we had to migrate to the Thomson...???
Reply With Quote
  #32  
Old 06.04.2011, 22:28
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Re: New Cablecom WLAN/VOIP Router - Security warning.

Well, at least it's what the tech support guy told me, but for once I was quite confident with his knowledge/responsiveness.

It was too late to place an order today, I will try with an administrative personal tomorrow and ask for a Ubee.

I'll let you know if it works.
Reply With Quote
  #33  
Old 06.04.2011, 22:58
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
Well, at least it's what the tech support guy told me, but for once I was quite confident with his knowledge/responsiveness.

It was too late to place an order today, I will try with an administrative personal tomorrow and ask for a Ubee.

I'll let you know if it works.
The Ubee works , I know. Just didn't want to risk getting a 200CHf bill for overseas calls because I wasn't using the right / supplied VOIP equipment... Guess we will have to compare bills, thats the real proof. Not too sure why they would be shipping new routers if the old ones work fine...
Reply With Quote
  #34  
Old 06.04.2011, 23:29
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Re: New Cablecom WLAN/VOIP Router - Security warning.

Simply because Swisscom and Sunrise offer a Modem/Router with wifi on similar subscriptions ?

Free embedded wifi AP is really appealing to the customers and were "missing" until now for Cablecom. :P
Reply With Quote
  #35  
Old 06.04.2011, 23:54
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

But it is not advertised as part of the deal, and why offer it if we didn't ask for it. That's bad for the bottom line. We were also told that CC 'had' to change the modem... Still, it's your risk. Get it in writing.
Reply With Quote
  #36  
Old 07.04.2011, 01:32
Guest
 
Posts: n/a
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
I am still not convinced the old
system was entirely VOIP from the client
IIRC, it was/is not VOIP, rather it's VoP (voice over packet),


Quote:
View Post
I am still not convinced the old system was entirely VOIP from the client , we have heard a noticeable change in call accoustics, something not too far from Skype on a good day.
Possibly something to do with cablecom being a local affiliate for Skype regarding VoIP so, eg, take a SkypeIn or SkypeOut option, and guess who provides the CH infrastructure
Reply With Quote
The following 2 users would like to thank for this useful post:
  #37  
Old 07.04.2011, 07:42
dawiz's Avatar
Forum Legend
 
Join Date: Dec 2006
Location: Ostschweiz
Posts: 4,112
Groaned at 96 Times in 46 Posts
Thanked 2,050 Times in 1,191 Posts
dawiz has a reputation beyond reputedawiz has a reputation beyond reputedawiz has a reputation beyond reputedawiz has a reputation beyond reputedawiz has a reputation beyond repute
Quote:
View Post
I've called Cablecom today and one of their tech support guy told me that you can get the "Ubee" model instead of the "Thompson" if you want a modem/bridge instead of modem/router.

When you order or migrate to the new subscription you have to tell the administrative personal that you would like the Ubee instead and it's all good.

At least there's an alternative.
Yeah, I tried that - didn't work. I have the Ubee thing now and am happy with it. When I switched to the Smart Combi I told them I want to keep my modem: no luck. The rep told me that's not possible. And sure enough, two days later I had the fraking WLAN modem in the mail. I haven't switched it out yet. And I'm thinking about just returning the WLAN thing instead of the Ubee
Reply With Quote
  #38  
Old 07.04.2011, 08:19
Newbie 1st class
 
Join Date: Apr 2011
Location: BE
Posts: 12
Groaned at 0 Times in 0 Posts
Thanked 0 Times in 0 Posts
raz0redge has no particular reputation at present
Quote:
View Post
Yeah, I tried that - didn't work. I have the Ubee thing now and am happy with it. When I switched to the Smart Combi I told them I want to keep my modem: no luck. The rep told me that's not possible. And sure enough, two days later I had the fraking WLAN modem in the mail. I haven't switched it out yet. And I'm thinking about just returning the WLAN thing instead of the Ubee
Well, this doesn't look very promising as a solution for my problem then.

I'm sure the Ubee modem works fine with new subscriptions, it's just simpler for them to tell you otherwise and giving out the new modems...
Reply With Quote
  #39  
Old 08.04.2011, 10:33
esto's Avatar
Forum Veteran
 
Join Date: Mar 2008
Location: CHE
Posts: 1,361
Groaned at 76 Times in 58 Posts
Thanked 3,225 Times in 1,406 Posts
esto has a reputation beyond reputeesto has a reputation beyond reputeesto has a reputation beyond reputeesto has a reputation beyond reputeesto has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
This modem is highly configurable.
Nothing blocked except port pass-through and no driver running for the USB port, effectively disabling it.
The USB port on the modem is disabled? I thought it would be nice to use as a NAS, too bad.

Quote:
View Post
I strongly suggest disabling the wireless interfaces. All of them.

There is a hidden second wireless network.

It is enabled by default when Wireless Access is enabled
You can not turn it off, unless you switch off all Wireless Access
Is there a physical WLAN switch on the modem, or do you have to log in to the modem and disable via the GUI?
Reply With Quote
  #40  
Old 08.04.2011, 10:48
Upthehatters2008's Avatar
Forum Legend
 
Join Date: May 2010
Location: In the kitchen at parties.
Posts: 4,540
Groaned at 204 Times in 120 Posts
Thanked 6,078 Times in 2,378 Posts
Upthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond reputeUpthehatters2008 has a reputation beyond repute
Re: New Cablecom WLAN/VOIP Router - Security warning.

Quote:
View Post
The USB port on the modem is disabled? I thought it would be nice to use as a NAS, too bad.


Is there a physical WLAN switch on the modem, or do you have to log in to the modem and disable via the GUI?
Disable via the web admin Page...
It does have a WPS switch though...
Reply With Quote
Reply




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
MICROSOFT CRITICAL WARNING - browser security flaw Guest General off-topic 6 29.04.2014 10:51
Cablecom offers (Router free) humano TV/internet/telephone 23 21.03.2011 17:41
wireless router with cablecom modem grimmus TV/internet/telephone 3 09.01.2010 22:50


All times are GMT +2. The time now is 21:23.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0