{"id":183705,"date":"2026-10-08T22:53:18","date_gmt":"2026-10-08T20:53:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/na-sorevnovanii-pwn2own-prodemonstrirovany-vzlomy-smartfonov-printerov-ustrojstv-umnogo-doma-i-ai-instrumentov"},"modified":"2026-10-08T22:53:23","modified_gmt":"2026-10-08T20:53:23","slug":"smartphone-printer-smart-home-device-and-ai-tool-hacks-demonstrated-at-pwn2own","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/smartphone-printer-smart-home-device-and-ai-tool-hacks-demonstrated-at-pwn2own","title":{"rendered":"Na sout\u011b\u017ei Pwn2Own byly p\u0159edvedeny hacky smartphon\u016f, tisk\u00e1ren, za\u0159\u00edzen\u00ed pro chytrou dom\u00e1cnost a AI n\u00e1stroj\u016f","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Byly shrnuty v\u00fdsledky t\u0159\u00ed dn\u016f sout\u011b\u017ee Pwn2Own Ireland 2026, b\u011bhem nich\u017e bylo p\u0159edvedeno 42 \u00fasp\u011b\u0161n\u00fdch \u00fatok\u016f s vyu\u017eit\u00edm dosud nezn\u00e1m\u00fdch zranitelnost\u00ed (0-day) na smartphonech, za\u0159\u00edzen\u00edch pro chytrou dom\u00e1cnost, tisk\u00e1rn\u00e1ch a AI n\u00e1stroj\u00edch. P\u0159i prov\u00e1d\u011bn\u00ed \u00fatok\u016f byly pou\u017eity nejnov\u011bj\u0161\u00ed firmwary a opera\u010dn\u00ed syst\u00e9my se v\u0161emi dostupn\u00fdmi aktualizacemi a v z\u00e1kladn\u00edm nastaven\u00ed. Celkov\u00fd prize pool \u010dinil 1,33 milionu dolar\u016f.<\/p>\n
Odzna\u010den\u00e9 \u00fatoky: <\/p>\n
\n
Smartphone Samsung Galaxy S26: 6 \u00fasp\u011b\u0161n\u00fdch hack\u016f. Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 31 250 $, 15 750 $, 11 000 $, 8 500 $ a 6 250 $.\n
Smartphone Google Pixel 10: 1 \u00fasp\u011b\u0161n\u00fd hack. Byla vyplacena odm\u011bna 150 000 dolar\u016f.\n
Za\u0159\u00edzen\u00ed pro dom\u00e1c\u00ed automatizaci Home Assistant Green: 6 \u00fasp\u011b\u0161n\u00fdch hack\u016f. Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 30 000 $, 12 000 $, 7 500 $, 7 000 $, 4 750 $ a 4 500 $.\n
Chytr\u00e9 osv\u011btlen\u00ed Philips Hue Bridge Pro: 4 \u00fasp\u011b\u0161n\u00e9 hacky. Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 40 000 $, 12 000 $, 6 000 $ a 5 000 $.\n
Tonometr Garmin Index BPM: 2 \u00fasp\u011b\u0161n\u00e9 hacky vyu\u017e\u00edvaj\u00edc\u00ed zranitelnosti spojen\u00e9 s p\u0159ete\u010den\u00edm z\u00e1sobn\u00edku. Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 20 000 $ a 6 750 $.\n
Chytr\u00e9 reproduktory Sonos Era 300: 5 \u00fasp\u011b\u0161n\u00fdch hack\u016f vyu\u017e\u00edvaj\u00edc\u00edch zranitelnosti spojen\u00e9 s p\u0159ete\u010den\u00edm z\u00e1sobn\u00edku a chybou form\u00e1tov\u00e1n\u00ed \u0159et\u011bzc\u016f. Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 50 000 $, 17 500 $, 12 500 $, 10 500 $ a 9 500 $.\n
Tisk\u00e1rna Lexmark CX532adw: 5 \u00fasp\u011b\u0161n\u00fdch hack\u016f vyu\u017e\u00edvaj\u00edc\u00edch zranitelnosti spojen\u00e9 s p\u0159\u00edstupem k pam\u011bti po jej\u00edm uvoln\u011bn\u00ed. Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 20 000 $, 10 000 $, 5 000 $, 5 000 $ a 4 250 $.\n
Tisk\u00e1rna Canon imageFORCE 1643F: 1 \u00fasp\u011b\u0161n\u00fd hack vyu\u017e\u00edvaj\u00edc\u00ed zranitelnosti spojen\u00e9 s nedostatkem spr\u00e1vn\u00e9 autentizace, injekc\u00ed p\u0159\u00edkaz\u016f a p\u0159eddefinovan\u00fdmi p\u0159ihla\u0161ovac\u00edmi \u00fadaji ve firmwaru. Byla vyplacena odm\u011bna 10 000 $.\n
Tisk\u00e1rna Brother MFC-L8970CDW: 1 \u00fasp\u011b\u0161n\u00fd hack. Byla vyplacena odm\u011bna \n$20000.<\/p>\n
AI br\u00e1na LiteLLM: 2 \u00fasp\u011b\u0161n\u00e9 hacky vyu\u017e\u00edvaj\u00edc\u00ed zranitelnosti spojen\u00e9 s nespr\u00e1vnou kontrolou vstupn\u00edch dat a mo\u017enost\u00ed injekce k\u00f3du. Bylo vyplaceno 40 000 $ a 15 000 $.\n
Syst\u00e9m automatizace spr\u00e1vy datab\u00e1z\u00ed Oracle Autonomous AI Database: 5 \u00fasp\u011b\u0161n\u00fdch hack\u016f spojen\u00fdch s p\u0159\u00edstupem k pam\u011bti po uvoln\u011bn\u00ed a nespr\u00e1vn\u00fdm zpracov\u00e1n\u00edm typ\u016f (Type Confusion). Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 40 000 $, 14 000 $, 10 000 $, 6 250 $ a 6 000 $.\n
AI agent OpenAI Codex: 1 \u00fasp\u011b\u0161n\u00fd hack vyu\u017e\u00edvaj\u00edc\u00ed zranitelnosti spojen\u00e9 s injekc\u00ed argumentu. Byla vyplacena odm\u011bna 40 000 $.\n
AI platforma Dynamo: 1 \u00fasp\u011b\u0161n\u00fd hack vyu\u017e\u00edvaj\u00edc\u00ed zranitelnost spojenou s p\u0159ete\u010den\u00edm z\u00e1sobn\u00edku. Byla vyplacena odm\u011bna 40 000 $.\n
Vektorov\u00e1 SDB Chroma: 2 \u00fasp\u011b\u0161n\u00e9 hacky. Byly vyplaceny odm\u011bny ve v\u00fd\u0161i 12 000 $ a 4 500 $.\n<\/ul>\n
Krom\u011b zm\u00edn\u011bn\u00fdch \u00fasp\u011b\u0161n\u00fdch \u00fatok\u016f skon\u010dilo 9 pokus\u016f o zneu\u017eit\u00ed zranitelnost\u00ed ne\u00fasp\u011b\u0161n\u011b, a to ve v\u0161ech p\u0159\u00edpadech proto, \u017ee t\u00fdmy nestihly prov\u00e9st \u00fatok v dan\u00e9m \u010dasov\u00e9m limitu. \nNe\u00fasp\u011b\u0161n\u00e9 byly pokusy o hackov\u00e1n\u00ed tisk\u00e1ren Brother MFC-L8970CDW a \nLexmark CX532adwe, tonometru Garmin Index BPM, chytr\u00e9ho telefonu Google Pixel 10, datab\u00e1ze Chroma a syst\u00e9mu dom\u00e1c\u00ed automatizace Home Assistant Green.<\/p>\n
O jak\u00fdch konkr\u00e9tn\u00edch komponent\u00e1ch jsou probl\u00e9my zat\u00edm nebyly ozn\u00e1meny. V souladu s podm\u00ednkami sout\u011b\u017ee budou podrobn\u00e9 informace o v\u0161ech p\u0159edveden\u00fdch 0-day zranitelnostech zve\u0159ejn\u011bny a\u017e po 90 dnech, kter\u00e9 jsou d\u00e1ny v\u00fdrobc\u016fm na p\u0159\u00edpravu aktualizac\u00ed odstra\u0148uj\u00edc\u00edch zranitelnosti. \n Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"