Bafuputsi ba ts'ireletso ba tsoang Armis tlhahisoleseding mabapi le () ho TCP/IP IPnet stack e sebelisoang tsamaisong ea VxWorks. Mathata a ngotsoe "URGENT/11". Bofokoli bo ka sebelisoa hole ka ho romella lipakete tsa marang-rang tse etselitsoeng ka ho khetheha, ho kenyelletsa le mathata a mang tlhaselo e ka etsoa ha e fihleloa ka li-firewall le NAT (mohlala, haeba mohlaseli a laola seva sa DNS se fihletsoeng ke sesebelisoa se tlokotsing se fumanehang marang-rang a kahare) .
Mathata a ts'eletseng a ka lebisa ho ts'ebetsong ea khoutu ea bahlaseli ha o sebetsana le likhetho tse sa nepahalang tsa IP kapa TCP ka har'a pakete, hammoho le ha u hlophisa lipakete tsa DHCP. Mathata a mahlano ha a kotsi haholo mme a ka lebisa ho lutla ha tlhahisoleseling kapa tlhaselo ea DoS. Phatlalatso ea ts'oaetso e hokahantsoe le Wind River, mme tokollo ea morao-rao ea VxWorks 7 SR0620, e lokollotsoeng bekeng e fetileng, e se e rarollotse mathata.
Kaha ts'oaetso e 'ngoe le e' ngoe e ama karolo e fapaneng ea marang-rang a marang-rang, litaba li ka 'na tsa e-ba tse tobileng, empa ho boleloa hore phetolelo e' ngoe le e 'ngoe ea VxWorks ho tloha 6.5 e na le bonyane ts'oaetso e le' ngoe ea khoutu e hole. Tabeng ena, bakeng sa mofuta o mong le o mong oa VxWorks hoa hlokahala ho theha tšebeliso e fapaneng. Ho ea ka Armis, bothata bo ama lisebelisoa tse ka bang limilione tse 200, ho kenyelletsa le lisebelisoa tsa indasteri le tsa bongaka, li-routers, lifono tsa VOIP, li-firewall, li-printer le lisebelisoa tse sa tšoaneng tsa Inthanete ea Lintho.
Khamphani ea Wind River hore palo ena e feteletse 'me bothata bo ama palo e fokolang feela ea lisebelisoa tse sa hlokahaleng, tseo, ka molao, li lekanyelitsoeng ho marang-rang a khoebo a ka hare. IPnet networking stack e ne e fumaneha feela likhatisong tse khethiloeng tsa VxWorks, ho kenyelletsa le litokollo tse seng li sa tšehetsoe (pele ho 6.5). Lisebelisoa tse thehiloeng ho sethala sa VxWorks 653 le VxWorks Cert Edition se sebelisoang libakeng tse mahlonoko (liroboto tsa indasteri, lisebelisoa tsa elektroniki tsa likoloi le tsa sefofane) ha li na mathata.
Baemeli ba Armis ba lumela hore ka lebaka la bothata ba ho ntlafatsa lisebelisoa tse tlokotsing, ho ka etsahala hore ho tla hlaha liboko tse tšoaetsang marang-rang a libaka le ho hlasela lihlopha tse tummeng ka ho fetisisa tsa lisebelisoa tse tlokotsing ka bongata. Mohlala, lisebelisoa tse ling, joalo ka lisebelisoa tsa bongaka le tsa indasteri, li hloka ho netefatsoa hape le liteko tse ngata ha li nchafatsoa, ho etsa hore ho be thata ho nchafatsa firmware ea bona.
moea o fokang River hore maemong a joalo, kotsi ea ho sekisetsa e ka fokotsoa ka ho nolofalletsa likarolo tsa ts'ireletso tse hahelletsoeng joalo ka stack e ke keng ea phethisoa, ts'ireletso ea phallo ea stack, thibelo ea mohala oa sistimi, le ho itšehla thajana. Tšireletso e ka boela ea fanoa ka ho eketsa li-signature tse thibelang tlhaselo ho li-firewall le mekhoa ea ho thibela ho kenella, hammoho le ho fokotsa ho kena ha marang-rang ho sesebelisoa feela ho pherimitha ea tšireletso ea ka hare.
Source: opennet.ru