{"id":36640,"date":"2019-10-31T22:12:50","date_gmt":"2019-10-31T19:12:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\/"},"modified":"2019-10-31T22:12:50","modified_gmt":"2019-10-31T19:12:50","slug":"11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","title":{"rendered":"11 vzd\u00e1len\u011b exploatovan\u00fdch zranitelnost\u00ed v TCP\/IP stacku VxWorks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci ze spole\u010dnosti Armis odhalili<\/a><\/noindex> informace o 11 zranitelnostech<\/a><\/noindex> (PDF<\/a><\/noindex>) ve TCP\/IP z\u00e1sobn\u00edku IPnet, kter\u00fd se pou\u017e\u00edv\u00e1 v opera\u010dn\u00edm syst\u00e9mu VxWorks. Probl\u00e9m\u016fm bylo p\u0159id\u011bleno k\u00f3dov\u00e9 jm\u00e9no \u201eURGENT\/11\u201c. Zranitelnosti mohou b\u00fdt zneu\u017eity vzd\u00e1len\u011b pomoc\u00ed odesl\u00e1n\u00ed speci\u00e1ln\u011b upraven\u00fdch s\u00ed\u0165ov\u00fdch paket\u016f, v\u010detn\u011b mo\u017enosti proveden\u00ed \u00fatoku p\u0159i p\u0159\u00edstupu p\u0159es firewally a NAT (nap\u0159\u00edklad pokud \u00fato\u010dn\u00edk kontroluje server DNS, na kter\u00fd se obrac\u00ed vnit\u0159n\u00ed s\u00ed\u0165ov\u00e9 zraniteln\u00e9 za\u0159\u00edzen\u00ed).<\/p>\n

\"11<\/a><\/noindex><\/center><\/p>\n

\u0160est probl\u00e9m\u016f m\u016f\u017ee v\u00e9st k proveden\u00ed k\u00f3du \u00fato\u010dn\u00edka p\u0159i zpracov\u00e1n\u00ed nespr\u00e1vn\u011b nastaven\u00fdch voleb IP nebo TCP v paketu, stejn\u011b jako p\u0159i anal\u00fdze DHCP paket\u016f. P\u011bt probl\u00e9m\u016f je m\u00e9n\u011b nebezpe\u010dn\u00fdch a m\u016f\u017ee v\u00e9st k \u00faniku informac\u00ed nebo proveden\u00ed DoS \u00fatok\u016f. Ozn\u00e1men\u00ed o zranitelnostech bylo koordinov\u00e1no se spole\u010dnost\u00ed Wind River \u2013 v posledn\u00edm vyd\u00e1n\u00ed VxWorks 7 SR0620 z minul\u00e9ho t\u00fddne byly probl\u00e9my ji\u017e vy\u0159e\u0161eny.<\/p>\n

Vzhledem k tomu, \u017ee ka\u017ed\u00e1 zranitelnost se dot\u00fdk\u00e1 r\u016fzn\u00fdch \u010d\u00e1st\u00ed s\u00ed\u0165ov\u00e9ho stacku, mohou b\u00fdt probl\u00e9my specifick\u00e9 pro ur\u010dit\u00e9 verze, ale tvrd\u00ed se, \u017ee v ka\u017ed\u00e9 verzi VxWorks od 6.5 existuje alespo\u0148 jedna zranitelnost, kter\u00e1 umo\u017e\u0148uje vzd\u00e1len\u00e9 proveden\u00ed k\u00f3du. Pro ka\u017ed\u00fd variant VxWorks je navr\u017eena samostatn\u00e1 exploit. Podle odhadu spole\u010dnosti Armis se probl\u00e9m dot\u00fdk\u00e1 p\u0159ibli\u017en\u011b 200 milion\u016f za\u0159\u00edzen\u00ed, v\u010detn\u011b pr\u016fmyslov\u00e9ho a l\u00e9ka\u0159sk\u00e9ho vybaven\u00ed, router\u016f, VOIP telefon\u016f, firewall\u016f, tisk\u00e1ren a r\u016fzn\u00fdch za\u0159\u00edzen\u00ed internetu v\u011bc\u00ed. <\/p>\n

Spole\u010dnost Wind River se domn\u00edv\u00e1<\/a><\/noindex>, \u017ee toto \u010d\u00edslo je nadhodnoceno a probl\u00e9m se t\u00fdk\u00e1 pouze relativn\u011b mal\u00e9ho po\u010dtu nekritick\u00fdch za\u0159\u00edzen\u00ed, kter\u00e1 jsou obvykle omezena na intern\u00ed korpor\u00e1tn\u00ed s\u00ed\u0165. S\u00ed\u0165ov\u00fd stack IPnet byl dod\u00e1v\u00e1n pouze v n\u011bkter\u00fdch edic\u00edch VxWorks, v\u010detn\u011b vyd\u00e1n\u00ed, jeho\u017e podpora ji\u017e byla ukon\u010dena (do 6.5). Pro za\u0159\u00edzen\u00ed zalo\u017een\u00e9 na platform\u00e1ch VxWorks 653 a VxWorks Cert Edition, pou\u017e\u00edvan\u00fdch v kritick\u00fdch oblastech (pr\u016fmyslov\u00ed roboti, automobilov\u00e1 a leteck\u00e1 elektronika), se probl\u00e9my neprojevuj\u00ed.<\/p>\n

Z\u00e1stupci spole\u010dnosti Armis se domn\u00edvaj\u00ed, \u017ee kv\u016fli slo\u017eitosti aktualizace zraniteln\u00fdch za\u0159\u00edzen\u00ed nelze vylou\u010dit vznik \u010derv\u016f, kter\u00e9 za\u00fato\u010d\u00ed na m\u00edstn\u00ed s\u00edt\u011b a masov\u011b za\u00fato\u010d\u00ed na nejpopul\u00e1rn\u011bj\u0161\u00ed kategorie zraniteln\u00fdch za\u0159\u00edzen\u00ed. Nap\u0159\u00edklad n\u011bkter\u00e1 za\u0159\u00edzen\u00ed, jako je zdravotnick\u00e9 a pr\u016fmyslov\u00e9 vybaven\u00ed, vy\u017eaduj\u00ed p\u0159i aktualizaci firmwaru proveden\u00ed op\u011btovn\u00e9 certifikace a dlouh\u00e9ho testov\u00e1n\u00ed, co\u017e zt\u011b\u017euje modernizaci jejich firmwaru.<\/p>\n

Wind River se domn\u00edv\u00e1<\/a><\/noindex>, tak\u017ee v takov\u00fdch p\u0159\u00edpadech je riziko kompromitace mo\u017en\u00e9 sn\u00ed\u017eit aktivac\u00ed ji\u017e existuj\u00edc\u00edch vestav\u011bn\u00fdch bezpe\u010dnostn\u00edch funkc\u00ed, jako jsou neprovediteln\u00e9 z\u00e1sobn\u00edky, ochrana proti p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku, omezen\u00ed syst\u00e9mov\u00fdch vol\u00e1n\u00ed a izolace proces\u016f. Ochranu lze tak\u00e9 zajistit p\u0159id\u00e1n\u00edm podpis\u016f blokuj\u00edc\u00edch \u00fatoky na firewallech a syst\u00e9mech pro prevenci pr\u016fnik\u016f, stejn\u011b jako omezen\u00edm s\u00ed\u0165ov\u00e9ho p\u0159\u00edstupu k za\u0159\u00edzen\u00ed pouze na vnit\u0159n\u00ed bezpe\u010dnostn\u00ed perimetr.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «URGENT\/11». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4711 vzd\u00e1len\u011b zneu\u017eiteln\u00fdch zranitelnostech v TCP\/IP stacku VxWorks | ProHoster","description":"Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci ze spole\u010dnosti Armis odhalili informace o","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:50+00:00","article:modified_time":"2019-10-31T19:12:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36640","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:15:12","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:17:29","updated":"2026-01-22 04:15:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36640"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36640\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/27438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}