Is it possible to check if my cable modem is secure and safe?

Adraeladael

Commendable
Jan 10, 2017
2
0
1,510
Hello!

Out of curiosity, are there any methods/tests to check if cable modem is secure, has no security holes (for example from trying to update firmware and not knowing what user is doing) and is properly working?

Speed and working seem to be completely okay, just asking to know if there are extra methods to see if everything is fine.

I'm in the process of trying to learn more about network security as until now I only paid attention to anti virus and firewalls inside of my computer.
I have no idea if modems could be compromised (giving malicious side ability to hack into computer or spy on user) or not as they are kind of primitive boxes. :D
 
Solution
Things you can check and change from your end:
WiFi administration - OFF. This means someone needs to be wired to the router to change anything. Can't do it via WiFi.
Remote Admin - OFF. This means that you have to wired directly to the router. Can't change settings from outside the house.

Both of these are usually OFF by default.

Disable WPS.
WPA2, with a strong password.
Also, strong password for admin access. Have these to be different passwords.
If you regularly have friends over, and your router has guest network functionality, let them connect to that instead of the main network.

Also, read this:
Home Cybersecurity Recommendations
http://www.tomshardware.co.uk/faq/id-3098406/home-cybersecurity-recommendations.html

MWP0004

Respectable
Oct 26, 2016
491
0
1,960
From this thread: http://www.tomshardware.com/answers/id-3296210/cable-modem-router-infected.html

"A modem is a layer 2 device. This means it is only visible to other layer 2 devices on the same network. Even if you were to know the mac address of someone elses modem it does you no good because a mac address will not pass any router. This is one of those fundamental network things they stress in network training about what is the difference between layer 2 and layer 3.

Now many modems have a ip address also but it is generally only used for troubleshooting since there is little you can configure on a modem. They all use private ip addresses and in most cases they use the same private ip address. This does not hurt anything because they only allow connection via this ip from the local ethernet port it is not possible to use the IP from the network side. Even if it was the private ip and the duplication of the ip would make it impossible for a external person to access it.

So pretty much only someone that had gained access to the ISP equipment could even attempt to hack the modem.

Still there is almost nothing you can change on a modem. They are pretty much single purpose boxes. To a point this would be like asking if you can hack the ethernet chip in your computer. Yes there is a software driver loaded into the chip but it is so single purpose it is unlikely to be able to be exploited."
 

Adraeladael

Commendable
Jan 10, 2017
2
0
1,510


So they are simple enough to be secure from having security holes that could be dangerous to ordinary user? And users themselves are also unable to actually botch something so bad modem becomes a security risk? (No one can control net-traffic, direct to bad sites etc) :D
 

MWP0004

Respectable
Oct 26, 2016
491
0
1,960


It's quite doubtful an "ordinary" user is even going to know how to access modem settings.
 

USAFRet

Titan
Moderator
Things you can check and change from your end:
WiFi administration - OFF. This means someone needs to be wired to the router to change anything. Can't do it via WiFi.
Remote Admin - OFF. This means that you have to wired directly to the router. Can't change settings from outside the house.

Both of these are usually OFF by default.

Disable WPS.
WPA2, with a strong password.
Also, strong password for admin access. Have these to be different passwords.
If you regularly have friends over, and your router has guest network functionality, let them connect to that instead of the main network.

Also, read this:
Home Cybersecurity Recommendations
http://www.tomshardware.co.uk/faq/id-3098406/home-cybersecurity-recommendations.html
 
Solution