Microsoft finds critical code execution bugs in IoT, OT devices

guest · Apr 30, 2021

Microsoft finds critical code execution bugs in IoT, OT devices
April 29, 2021
https://www.bleepingcomputer.com/ne...itical-code-execution-bugs-in-iot-ot-devices/

Microsoft security researchers have discovered over two dozen critical remote code execution (RCE) vulnerabilities in Internet of Things (IoT) devices and Operational Technology (OT) industrial systems.

These 25 security flaws are known collectively as BadAlloc and are caused by memory allocation Integer Overflow or Wraparound bugs.
Threat actors can exploit them to trigger system crashes and execute malicious code remotely on vulnerable IoT and OT systems.
Click to expand...

"Our research shows that memory allocation implementations written throughout the years as part of IoT devices and embedded software have not incorporated proper input validations," the Microsoft Security Response Center team said.

The complete list of devices affected by BadAlloc includes (links to patches are available in CISA's advisory): [...]
The National Security Agency (NSA) published a security advisory earlier today on evaluating IT and OT connection risks, and preventing and detecting malicious activities.
Click to expand...

Log in or Sign up

Microsoft finds critical code execution bugs in IoT, OT devices

guest Guest

Log in or Sign up

Microsoft finds critical code execution bugs in IoT, OT devices

guest Guest

Useful Searches