229 matches found
PT-2017-12713
Name of the Vulnerable Software and Affected Versions Kaspersky Embedded Systems Security version 1.2.0.300 Description The issue is related to kernel pool memory corruption in one of the drivers, which can lead to local privilege escalation. Recommendations For version 1.2.0.300, at the moment,...
CVE-2017-12823: Improper Restriction of Operations within the Bounds of a Memory Buffer
Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation...
Cesanta Mongoose MQTT Payload Length Remote Code Execution(CVE-2017-2892)
Summary An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and...
REMOTE CODE EXECUTION (CVE-2017-13772) WALKTHROUGH ON A TP-LINK ROUTER
INTRODUCTION In this post, I will be discussing my recent findings while conducting vulnerability research on a home router: TP-Link’s WR940N home WiFi router. This post will outline the steps taken to identify vulnerable code paths, and how we can exploit those paths to gain remote code executio...
PT-2017-18006 · Nxp · Nxp I.Mx 7Dual +16
Name of the Vulnerable Software and Affected Versions: NXP i.MX 28 NXP i.MX 50 NXP i.MX 53 NXP i.MX 7Solo NXP i.MX 7Dual NXP Vybrid VF3xx NXP Vybrid VF5xx NXP Vybrid VF6xx NXP i.MX 6ULL NXP i.MX 6UltraLite NXP i.MX 6SoloLite NXP i.MX 6Solo NXP i.MX 6DualLite NXP i.MX 6SoloX NXP i.MX 6Dual NXP i.M...
Vulnerabilities in Car Washes
Articles about serious vulnerabilities in IoT devices and embedded systems are now dime-a-dozen. This one concerns Internet-connected car washes: A group of security researchers have found vulnerabilities in internet-connected drive-through car washes that would let hackers remotely hijack the...
Vulnerability Spotlight: Multiple Vulnerabilities in InsideSecure MatrixSSL
These vulnerabilities were discovered by Aleksandar Nikolic of Cisco TalosOverviewMatrixSSL is a TLS/SSL stack offered in the form of a Software Development Kit SDK that is geared towards application in Internet of Things IOT devices and other embedded systems. It features low resource overhead a...
InsideSecure MatrixSSL x509 certificate IssuerDomainPolicy Remote Code Execution Vulnerability
Summary An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a...
Is Continuing to Patch Windows XP a Mistake?
Last week, Microsoft issued a security patch for Windows XP, a 16-year-old operating system that Microsoft officially no longer supports. Last month, Microsoft issued a Windows XP patch for the vulnerability used in WannaCry. Is this a good idea? This 2014 essay argues that it's not: The zero-day...
[SECURITY] Fedora 25 Update: picocom-2.2-2.fc25
As its name suggests, picocom is a minimal dumb-terminal emulation program. It is, in principle, very much like minicom, only it's "pico" instead of "mini"! It was designed to serve as a simple, manual, modem configuration, testing, and debugging tool. It has also served quite well as a low-tech...
[SECURITY] Fedora 25 Update: dropbear-2017.75-1.fc25
Dropbear is a relatively small SSH server and client. It's particularly use ful for "embedded"-type Linux or other Unix systems, such as wireless routers...
wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One
TALOS-2017-0293 WOLFSSL LIBRARY X509 CERTIFICATE TEXT PARSING CODE EXECUTION VULNERABILITY MAY 8, 2017 CVE-2017-2800 SUMMARY An exploitable off-by-one write vulnerability exists in the x509 certificate parsing functionality of wolfSSL library versions up to 3.10.2. A specially crafted x509...
Windows Botnet Spreading Mirai Variant
A Chinese-speaking attacker is spreading a Mirai variant from a repurposed Windows-based botnet. Researchers at Kaspersky Lab published a report today, and said the code was written by an experienced developer who also built in the capability to spread the IoT malware to Linux machines under...
TEW-654TR router vulnerability analysis and mining-vulnerability warning-the black bar safety net
Read the complete devttys0 predecessors of”exploiting embedded systems”series. Analysis under the relevant firmware router model: TEW-654TR firmware download address: http://download.trendnet.com/TEW-654TR/firmware/ 0×01 environment settings ! !/ bin/bash INPUT="$1" LEN=$echo-n "$INPUT" | wc-c...
PT-2017-04
Name of the Vulnerable Software and Affected Versions Kaspersky Embedded Systems Security affected versions not specified Description The issue is caused by incorrect operation of protection mechanisms under excessive service load. An attacker can exploit this to elevate their privileges and run ...
In-Flight Entertainment System Flaws Put Passenger Data at Risk
A simple tap on an in-flight entertainment system touchscreen kicked off an intellectual exercise that resulted in the discovery of a number of firmware vulnerabilities in embedded systems used by at least 13 airlines. The vulnerabilities in the Panasonic Avionics IFE firmware could allow a local...
[SECURITY] Fedora 23 Update: dropbear-2016.74-1.fc23
Dropbear is a relatively small SSH server and client. It's particularly use ful for "embedded"-type Linux or other Unix systems, such as wireless routers...
[SECURITY] [DLA 561-1] uclibc security update
Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...
