{"id":36640,"date":"2019-10-31T22:12:50","date_gmt":"2019-10-31T19:12:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\/"},"modified":"2019-10-31T22:12:50","modified_gmt":"2019-10-31T19:12:50","slug":"11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","title":{"rendered":"11 kaugelt kasutatavat haavatavust TCP\/IP VxWorks toe","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Turvalisuse uurijad ettev\u00f5ttest Armis avaldasid<\/a><\/noindex> teavet 11 haavatavusest<\/a><\/noindex> (PDF<\/a><\/noindex>) TCP\/IP stack'i IPnet, mida kasutatakse VxWorks operatsioonis\u00fcsteemis. Probleemidele on antud koodnimi «URGENT\/11». Haavatavusi saab kaugelt kasutada, saates spetsiaalselt vormindatud v\u00f5rgupakette, sealhulgas on m\u00f5nede probleemide puhul v\u00f5imalik r\u00fcnnak l\u00e4bi tulem\u00fc\u00fcride ja NAT'i (n\u00e4iteks, kui r\u00fcndaja kontrollib DNS-serverit, millele haavatav seade sisev\u00f5rgus p\u00f6\u00f6rdub).<\/p>\n

\"11<\/a><\/noindex><\/center><\/p>\n

Kuuendal probleemil on potentsiaal v\u00f5imaldada r\u00fcndajal k\u00e4itada koodi, kui t\u00f6\u00f6tlemine toimub vigaselt seadistatud IP v\u00f5i TCP valikute korral paketis ning samuti DHCP pakettide t\u00f5lgendamisel. Viis probleemi on v\u00e4hem t\u00f5sised ja v\u00f5ivad viia teabe lekitamiseni v\u00f5i DoS-r\u00fcnnakute sooritamiseni. Haavatavustega seotud teave on koosk\u00f5lastatud ettev\u00f5tte Wind Riveriga \u2014 eelmisel n\u00e4dalal ilmunud VxWorks 7 SR0620 viimases v\u00e4ljaandes on probleemid juba k\u00f5rvaldatud.<\/p>\n

Kuna iga haavatavus m\u00f5jutab erinevaid osi v\u00f5rgustiku protokollist, v\u00f5ivad probleemid olla spetsiifilised teatud v\u00e4ljaannetele, kuid v\u00e4idetakse, et igas VxWorks'i versioonis alates 6.5 ilmneb v\u00e4hemalt \u00fcks haavatavus, mis v\u00f5imaldab kodeeritud kaugtegevust. Iga VxWorks'i variandi jaoks on vajalik eraldi eksploit. Ettev\u00f5tte Armis hinnangul m\u00f5jutab probleem umbes 200 miljonit seadet, sealhulgas t\u00f6\u00f6stuslikku ja meditsiinitehnikat, marsruuterid, VOIP-telefonid, tulem\u00fc\u00fcrid, printerid ja erinevad asjade Interneti seadmed. <\/p>\n

Ettev\u00f5te Wind River Aasta hiljem j\u00f5udsid Red Hat ja IBM uuele kokkuleppele \u2014 nad<\/a><\/noindex>, et see number on p\u00f5hiprobleemiga v\u00f5rreldes eksitav ja see puudutab ainult suhteliselt v\u00e4ikest arvu mitte-kriitilisi seadmeid, mis tavaliselt piirdub sisemise ettev\u00f5tte v\u00f5rguga. V\u00f5rgustiku protokollipakett IPnet oli saadaval ainult teatud VxWorks'i v\u00e4ljaannetes, sealhulgas v\u00e4ljaannetes, mille tugi on juba l\u00f5petatud (enne 6.5). VxWorks 653 ja VxWorks Cert Edition platvormidel, mida kasutatakse kriitilistes valdkondades (t\u00f6\u00f6stusrobotite, autot\u00f6\u00f6stuse ja lennunduse elektroonika jms), probleeme ei ilmne.<\/p>\n

Armis esindajad usuvad, et haavatavate seadmete keerukuse t\u00f5ttu v\u00e4rskendamise korral on v\u00f5imalus, et tekivad ussid, mis r\u00fcndavad kohalikku v\u00f5rku ja massiliselt sihivad k\u00f5ige populaarsemaid haavatavate seadmete kategooriaid. N\u00e4iteks m\u00f5ned seadmed, nagu meditsiini- ja t\u00f6\u00f6stustehnika, n\u00f5uavad tarkvarauuenduste jaoks uuesti sertifitseerimist ja pikemaajalist testimist, mis muudab nende tarkvara v\u00e4rskendamise keeruliseks.<\/p>\n

Wind River arvab<\/a><\/noindex>, et sellistel juhtudel saab kompromiteerimise riski v\u00e4hendada, aktiveerides juba olemasolevad turvameetmed, nagu n\u00e4iteks mittek\u00e4ivitatav virn, virna \u00fclevoolu kaitse, s\u00fcsteemikutsungite piiramine ja protsesside isoleerimine. Kaitset saab tagada ka, lisades r\u00fcndevastaseid allkirju tulem\u00fc\u00fcri ja sissetungi t\u00f5kestamise s\u00fcsteemide kaudu, samuti piirates seadme v\u00f5rgu\u00fchendust ainult sisemiste turvapiiride kaudu.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «URGENT\/11». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4711 kaugelt kasutatavat haavatavust TCP\/IP VxWorks\u2019i protokollipakkumise sees | ProHoster","description":"Armis turvauuringute spetsialistid avaldasid teavet","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:50+00:00","article:modified_time":"2019-10-31T19:12:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36640","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:15:12","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:17:29","updated":"2026-01-22 04:15:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36640"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36640\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}