HDMI-Walk: Attacking HDMI Distribution Networks via Consumer Electronic Control Protocol
Luis Puche Rondon, Leonardo Babun, Kemal Akkaya, and A. Selcuk Uluagac

TL;DR
This paper reveals vulnerabilities in HDMI's CEC protocol, demonstrating how attackers can exploit these flaws to perform remote and local attacks on HDMI devices, highlighting a new security threat in widely used multimedia systems.
Contribution
It introduces HDMI-Walk, the first framework to exploit CEC protocol vulnerabilities for attacking HDMI distribution networks, including remote control and denial of service attacks.
Findings
Demonstrated feasibility of remote and local attacks on HDMI devices
Showed that CEC vulnerabilities can lead to arbitrary device control
Proposed security measures for HDMI device networks
Abstract
The High Definition Multimedia Interface (HDMI) is the de-facto standard for Audio/Video interfacing between video-enabled devices. Today, almost tens of billions of HDMI devices exist worldwide and are widely used to distribute A/V signals in smart homes, offices, concert halls, and sporting events making HDMI one of the most highly deployed systems in the world. An important component in HDMI is the Consumer Electronics Control (CEC) protocol, which allows for the interaction between devices within an HDMI distribution network. Nonetheless, existing network security mechanisms only protect traditional networking components, leaving CEC outside of their scope. In this work, we identify and tap into CEC protocol vulnerabilities, using them to implement realistic proof-of-work attacks on HDMI distribution networks. We study, how current insecure CEC protocol practices and HDMI…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdvanced Malware Detection Techniques · Security and Verification in Computing · Physical Unclonable Functions (PUFs) and Hardware Security
