{"id":36640,"date":"2019-10-31T22:12:50","date_gmt":"2019-10-31T19:12:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\/"},"modified":"2019-10-31T22:12:50","modified_gmt":"2019-10-31T19:12:50","slug":"11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","title":{"rendered":"11 fj\u00e4rrutnyttjade s\u00e5rbarheter i TCP\/IP-stacken VxWorks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

S\u00e4kerhetsforskare fr\u00e5n Armis koden<\/a><\/noindex> information om 11 s\u00e5rbarheter<\/a><\/noindex> (PDF<\/a><\/noindex>) i TCP\/IP-stacken IPnet, som anv\u00e4nds i operativsystemet VxWorks. Problemen har f\u00e5tt kodnamnet \u00abURGENT\/11\u00bb. S\u00e5rbarheterna kan utnyttjas p\u00e5 distans genom att skicka s\u00e4rskilt utformade n\u00e4tverkspaket, inklusive f\u00f6r vissa problem kan en attack utf\u00f6ras vid \u00e5tkomst genom brandv\u00e4ggar och NAT (till exempel om angriparen kontrollerar DNS-servern som det s\u00e5rbara enheten i det interna n\u00e4tverket kontaktar).<\/p>\n

\"11<\/a><\/noindex><\/center><\/p>\n

Sex problem kan leda till k\u00f6rning av skadlig kod vid hantering av felaktigt angivna IP- eller TCP-alternativ i paketet, samt vid tolkning av DHCP-paket. Fem problem \u00e4r mindre farliga och kan leda till informationsl\u00e4ckage eller utf\u00f6rande av DoS-attacker. Avsl\u00f6jandet av s\u00e5rbarheterna \u00e4r samordnat med f\u00f6retaget Wind River \u2013 i den senaste utg\u00e5van av VxWorks 7 SR0620, som publicerades f\u00f6rra veckan, har problemen redan \u00e5tg\u00e4rdats.<\/p>\n

Eftersom varje s\u00e5rbarhet p\u00e5verkar olika delar av n\u00e4tverksstacken kan problemen vara specifika f\u00f6r vissa versioner, men det p\u00e5st\u00e5s att det finns \u00e5tminstone en s\u00e5rbarhet i varje version av VxWorks fr\u00e5n och med 6.5 som m\u00f6jligg\u00f6r fj\u00e4rrexekvering av kod. F\u00f6r varje variant av VxWorks m\u00e5ste en separat exploit skapas. Enligt Armis ber\u00e4knas problemet p\u00e5verka cirka 200 miljoner enheter, inklusive industriell och medicinsk utrustning, routrar, VOIP-telefoner, brandv\u00e4ggar, skrivare och olika IoT-enheter. <\/p>\n

Wind River anser<\/a><\/noindex>, att detta tal \u00e4r \u00f6verdrivet och att problemet endast omfattar ett relativt litet antal icke-kritiska enheter, som vanligtvis \u00e4r begr\u00e4nsade till interna f\u00f6retagsn\u00e4tverk. N\u00e4tverksstacken IPnet levererades endast med vissa versioner av VxWorks, inklusive utg\u00e5vor vars st\u00f6d redan har upph\u00f6rt (fram till 6.5). I enheter baserade p\u00e5 plattformarna VxWorks 653 och VxWorks Cert Edition, som anv\u00e4nds inom kritiska omr\u00e5den (industrirobotar, bil- och flygelektronik), upptr\u00e4der problemen inte.<\/p>\n

Representanter f\u00f6r Armis anser att p\u00e5 grund av sv\u00e5righeterna med att uppdatera s\u00e5rbara enheter \u00e4r det inte uteslutet att maskar kan uppst\u00e5, som attackerar lokala n\u00e4tverk och massivt p\u00e5verkar de mest popul\u00e4ra kategorierna av s\u00e5rbara enheter. Till exempel kr\u00e4ver vissa enheter, s\u00e5som medicinsk och industriell utrustning, omcertifiering och l\u00e5ngvarig testning n\u00e4r firmware uppdateras, vilket f\u00f6rsv\u00e5rar uppdateringarna av firmware.<\/p>\n

Wind River anser<\/a><\/noindex>, att i s\u00e5dana fall kan risken f\u00f6r kompromiss minska genom att aktivera redan befintliga inbyggda s\u00e4kerhetsfunktioner, som icke-exekverbara stackar, skydd mot stack\u00f6verfl\u00f6d, begr\u00e4nsade systemanrop och processisolering. Skydd kan \u00e4ven uppn\u00e5s genom att l\u00e4gga till blockering av angriparsignaturer i brandv\u00e4ggar och intr\u00e5ngsskyddssystem samt genom att begr\u00e4nsa n\u00e4tverks\u00e5tkomst till enheten endast till det interna s\u00e4kerhetsperimetern.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «URGENT\/11». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4711 fj\u00e4rrutnyttjade s\u00e5rbarheter i TCP\/IP-stacken VxWorks | ProHoster","description":"S\u00e4kerhetsforskare fr\u00e5n Armis har avsl\u00f6jat information om","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:50+00:00","article:modified_time":"2019-10-31T19:12:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36640","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:15:12","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:17:29","updated":"2026-01-22 04:15:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=36640"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36640\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/27438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=36640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=36640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=36640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}