Vulnerabilities in Old Third-Party Software Components- Importance of Having SBoM for IoT/OT Devices
summary
Security research finds 21 vulnerabilities across Helios and third‑party code, with 15 in open source; analysis uses Docker, QEMU, libFuzzer and static/dynamic review, and uncovers an OpenNDS buffer overflow triggered by a >8KB GET that chains to an exec gadget for root command execution and a busybox reverse shell. The web UI AC Manager exposes upload and TinyXML parsing flaws; Shodan fingerprints show 86,000 devices (22,000 using a default cert), many end‑of‑life, and honeypots record ~5,000 attacker IPs.
AI-written summary · about
chapters (12)
- 0:00IoT/OT device vulnerabilities
- 1:08Security through obscurity
- 2:13Sierra Wireless AirLink Gateways
- 5:44Vulnerability research methodology
- 9:23TinyXML and OpenNDS vulnerabilities
- 14:39Hardcoded credentials and certificates
- 19:37Buffer overflow to root device
- 26:00Impact of exposed devices
- 30:16Attacks on AirLink devices
- 32:25Edge networking attack scenario
- 33:50Manufacturer recommendations
- 37:42Q&A
related talks
44mNight of the living vulnerabilities
39mNight of the living vulnerabilities
45mOutside the box: pwning IoT devices through their applications
26mHacking buildings: Security flaws in embedded building control systems
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security
59m(In)secure Things
37mFinding Vulnerabilities in IoT Embedded Devices Using Linux OS and Open Source Tools
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions