{"id":36640,"date":"2019-10-31T22:12:50","date_gmt":"2019-10-31T19:12:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\/"},"modified":"2019-10-31T22:12:50","modified_gmt":"2019-10-31T19:12:50","slug":"11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","title":{"rendered":"11 udaljenih ranjivosti u TCP\/IP steku VxWorks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Istra\u017eiva\u010di sigurnosti iz tvrtke Armis otkrili su<\/a><\/noindex> informacije o 11 ranjivosti<\/a><\/noindex> (PDF<\/a><\/noindex>) u TCP\/IP stogu IPnet, koji se koristi u operativnom sustavu VxWorks. Problemima je dodijeljeno kodno ime \u00abURGENT\/11\u00bb. Ranljivosti se mogu iskoristiti udaljeno slanjem posebno oblikovanih mre\u017enih paketa, a za neka pitanja mogu\u0107e je izvr\u0161iti napad putem vatrozida i NAT-a (na primjer, ako napada\u010d kontrolira DNS poslu\u017eitelj kojem pristupa ranjivi ure\u0111aj unutar interne mre\u017ee).<\/p>\n

\"11<\/a><\/noindex><\/center><\/p>\n

\u0160est problema mo\u017ee dovesti do izvr\u0161enja koda napada\u010da prilikom obrade neispravno postavljenih opcija IP ili TCP u paketu, kao i prilikom analize DHCP paketa. Pet problema je manje opasno i mo\u017ee dovesti do curenja informacija ili provo\u0111enja DoS napada. Otkrivanje informacija o ranjivostima koordinirano je s tvrtkom Wind River \u2014 u objavljenom pro\u0161log tjedna najnovijem izdanju VxWorks 7 SR0620 problemi su ve\u0107 ispravljeni.<\/p>\n

Budu\u0107i da svaka ranjivost zahva\u0107a razli\u010dite dijelove mre\u017enog stoga, problemi mogu biti specifi\u010dni za odre\u0111ena izdanja, ali se tvrdi da se u svakoj verziji VxWorks od 6.5 pojavljuje barem jedna ranjivost koja omogu\u0107ava daljensko izvr\u0161avanje koda. Pri tome za svaku varijantu VxWorks potrebno je stvoriti zasebni exploit. Prema procjeni tvrtke Armis, problem poga\u0111a oko 200 milijuna ure\u0111aja, me\u0111u kojima su industrijska i medicinska oprema, usmjeriva\u010di, VOIP telefoni, vatrozidi, pisa\u010di i razni IoT ure\u0111aji. <\/p>\n

Tvrtka Wind River smatra<\/a><\/noindex>, da je ta brojka pretjerana i da problem obuhva\u0107a samo relativno mali broj neva\u017enih ure\u0111aja koji su obi\u010dno ograni\u010deni na unutarnju korporativnu mre\u017eu. Mre\u017eni stog IPnet isporu\u010divan je samo u nekim izdanjima VxWorks, uklju\u010duju\u0107i verzije \u010dija je podr\u0161ka ve\u0107 prekinuta (do 6.5). U ure\u0111ajima temeljenim na platformama VxWorks 653 i VxWorks Cert Edition, koji se koriste u kriti\u010dnim podru\u010djima (industrijski roboti, automobilaska i avioni\u010dka elektronika), problemi se ne manifestiraju.<\/p>\n

Predstavnici Armis smatraju da zbog slo\u017eenosti a\u017euriranja ure\u0111aja koji su podlo\u017eni ranjivostima nije isklju\u010dena pojava crva koji bi napao lokalne mre\u017ee i masovno napao najpopularnije kategorije ranjivih ure\u0111aja. Na primjer, neki ure\u0111aji, poput medicinske i industrijske opreme, zahtijevaju ponovno certificiranje i dugotrajno testiranje prilikom a\u017euriranja firmvera, \u0161to ote\u017eava njihovo a\u017euriranje.<\/p>\n

Wind River smatra<\/a><\/noindex>, da se u takvim slu\u010dajevima rizik od kompromitacije mo\u017ee smanjiti uklju\u010divanjem ve\u0107 postoje\u0107ih ugra\u0111enih sredstava za osiguranje, kao \u0161to su neizvr\u0161ni stek, za\u0161tita od prelivanja steka, ograni\u010denje sistemskih poziva i izolacija procesa. Za\u0161tita se mo\u017ee osigurati i dodavanjem potpisnih blokada napada na vatrozidima i sustavima za spre\u010davanje upada, kao i ograni\u010denjem mre\u017enog pristupa ure\u0111aju samo sa unutarnjeg sigurnosnog perimetra.<\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «URGENT\/11». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4711 udaljeno iskoristivih ranjivosti u TCP\/IP steku VxWorks | ProHoster","description":"Istra\u017eiva\u010di sigurnosti iz kompanije Armis otkrili su informacije o","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:50+00:00","article:modified_time":"2019-10-31T19:12:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36640","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:15:12","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:17:29","updated":"2026-01-22 04:15:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/36640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=36640"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/36640\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/27438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=36640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=36640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=36640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}