{"id":36640,"date":"2019-10-31T22:12:50","date_gmt":"2019-10-31T19:12:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\/"},"modified":"2019-10-31T22:12:50","modified_gmt":"2019-10-31T19:12:50","slug":"11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","title":{"rendered":"11 zdalnie eksploatowanych luk w stosie TCP\/IP VxWorks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Badacze zabezpiecze\u0144 z firmy Armis <noindex><a rel=\"nofollow\" href=\"https:\/\/armis.com\/armis-discovers-vulnerabilities-in-vxworks-in-critical-devices\/\">ujawnili<\/a><\/noindex> informacje o <noindex><a rel=\"nofollow\" href=\"https:\/\/armis.com\/urgent11\/\">11 podatno\u015bciach<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/go.armis.com\/hubfs\/White-papers\/Urgent11%20Technical%20White%20Paper.pdf\">PDF<\/a><\/noindex>) w protokole TCP\/IP IPnet, u\u017cywanym w systemie operacyjnym VxWorks. Problemy maj\u0105 kodowe nazwy &#171;URGENT\/11&#187;. Luki mog\u0105 by\u0107 wykorzystywane zdalnie przez wysy\u0142anie specjalnie skonstruowanych pakiet\u00f3w sieciowych, w tym w przypadku niekt\u00f3rych problem\u00f3w mo\u017cliwe jest przeprowadzenie ataku przy dost\u0119pie przez zapory sieciowe i NAT (na przyk\u0142ad, je\u015bli atakuj\u0105cy kontroluje serwer DNS, do kt\u00f3rego odwo\u0142uje si\u0119 podatne urz\u0105dzenie w wewn\u0119trznej sieci).<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/armis.com\/wp-content\/uploads\/2019\/07\/u11-cloud-printing-service-e1564371849694.png\"><img decoding=\"async\" alt=\"11 zdalnie eksploatowanych luk w stosie TCP\/IP VxWorks\" src=\"\/wp-content\/uploads\/2019\/07\/bd4bb8430a2c575d93f6a74a174daedc.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Sze\u015b\u0107 problem\u00f3w mo\u017ce prowadzi\u0107 do wykonania kodu z\u0142o\u015bliwego podczas przetwarzania niepoprawnie ustawionych opcji IP lub TCP w pakiecie, a tak\u017ce podczas analizowania pakiet\u00f3w DHCP. Pi\u0119\u0107 problem\u00f3w jest mniej gro\u017anych i mo\u017ce skutkowa\u0107 wyciekiem informacji lub przeprowadzeniem atak\u00f3w DoS. Ujawnienie informacji o lukach zosta\u0142o skoordynowane z firm\u0105 Wind River \u2014 w opublikowanej w zesz\u0142ym tygodniu najnowszej wersji VxWorks 7 SR0620 problemy zosta\u0142y ju\u017c usuni\u0119te.<\/p>\n<p>Poniewa\u017c ka\u017cda podatno\u015b\u0107 dotyczy r\u00f3\u017cnych cz\u0119\u015bci stosu sieciowego, problemy mog\u0105 by\u0107 specyficzne dla niekt\u00f3rych wersji, ale twierdzi si\u0119, \u017ce w ka\u017cdej wersji VxWorks od 6.5 wyst\u0119puje przynajmniej jedna podatno\u015b\u0107 umo\u017cliwiaj\u0105ca zdalne wykonanie kodu. Przy tym dla ka\u017cdego wariantu VxWorks konieczne jest stworzenie oddzielnego exploit'a. Szacuje si\u0119, \u017ce problem dotyczy oko\u0142o 200 milion\u00f3w urz\u0105dze\u0144, w tym sprz\u0119tu przemys\u0142owego i medycznego, router\u00f3w, telefon\u00f3w VOIP, zap\u00f3r sieciowych, drukarek oraz r\u00f3\u017cnych urz\u0105dze\u0144 internetu rzeczy.  <\/p>\n<p>Firma Wind River <noindex><a rel=\"nofollow\" href=\"https:\/\/blogs.windriver.com\/wind_river_blog\/2019\/07\/urgent-11-further-boosts-vxworks-security.html\">uwa\u017ca<\/a><\/noindex>, twierdzi, \u017ce ta liczba jest zawy\u017cona i problem dotyczy tylko stosunkowo niewielkiej liczby niekrytycznych urz\u0105dze\u0144, kt\u00f3re zazwyczaj s\u0105 ograniczone do wewn\u0119trznej sieci korporacyjnej. Stos sieciowy IPnet by\u0142 dostarczany tylko w niekt\u00f3rych edycjach VxWorks, w tym w wersjach, kt\u00f3rych wsparcie ju\u017c zosta\u0142o zako\u0144czone (przed 6.5). W urz\u0105dzeniach opartych na platformach VxWorks 653 i VxWorks Cert Edition, stosowanych w krytycznych obszarach (przemys\u0142owe roboty, elektronika samochodowa i lotnicza), problemy te si\u0119 nie pojawiaj\u0105.<\/p>\n<p>Przedstawiciele Armis uwa\u017caj\u0105, \u017ce z powodu skomplikowanej aktualizacji urz\u0105dze\u0144 nara\u017conych na niebezpiecze\u0144stwa, nie mo\u017cna wykluczy\u0107 pojawienia si\u0119 robak\u00f3w, kt\u00f3re b\u0119d\u0105 atakowa\u0107 lokalne sieci i masowo atakowa\u0107 najpopularniejsze kategorie nara\u017conych urz\u0105dze\u0144. Na przyk\u0142ad niekt\u00f3re urz\u0105dzenia, takie jak sprz\u0119t medyczny i przemys\u0142owy, wymagaj\u0105 przeprowadzenia ponownej certyfikacji i d\u0142ugotrwa\u0142ego testowania podczas aktualizacji oprogramowania, co utrudnia wprowadzenie \u0142atek.<\/p>\n<p>Wind River <noindex><a rel=\"nofollow\" href=\"https:\/\/www.windriver.com\/security\/announcements\/tcp-ip-network-stack-ipnet-urgent11\/ipnet-faq\/\">uwa\u017ca<\/a><\/noindex>, \u017ce w takich przypadkach ryzyko kompromitacji mo\u017cna zredukowa\u0107 poprzez w\u0142\u0105czenie ju\u017c istniej\u0105cych wbudowanych \u015brodk\u00f3w ochrony bezpiecze\u0144stwa, takich jak nie wykonywalny stos, ochrona przed przepe\u0142nieniem stosu, ograniczenie wywo\u0142a\u0144 systemowych i izolacja proces\u00f3w. Ochrona mo\u017ce by\u0107 r\u00f3wnie\u017c zapewniona przez dodanie sygnatur blokuj\u0105cych ataki na zaporach sieciowych i systemach zapobiegania w\u0142amaniom, a tak\u017ce poprzez ograniczenie dost\u0119pu sieciowego do urz\u0105dzenia tylko do wewn\u0119trznego obszaru bezpiecze\u0144stwa.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>\u0179r\u00f3d\u0142o: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51189\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f &#171;URGENT\/11&#187;. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:12:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:12:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4711 zdalnie eksploatowanych luk w stosie TCP\/IP VxWorks | ProHoster","description":"Badacze bezpiecze\u0144stwa z firmy Armis ujawnili informacje o","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:50+00:00","article:modified_time":"2019-10-31T19:12:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36640","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:15:12","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:17:29","updated":"2026-01-22 04:15:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/36640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=36640"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/36640\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/27438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=36640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=36640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=36640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}