RTLS systems vulnerable to MiTM attacks, location manipulation

guest · Aug 16, 2022

August 16, 2022

Security researchers have uncovered multiple vulnerabilities impacting UWB (ultra-wideband) RTLS (real-time locating systems), enabling threat actors to conduct man-in-the-middle attacks and manipulate tag geo-location data.

RTLS technology is widely used in industrial environments, mass transit, healthcare, and smart city applications. Its primary role is to assist in safety by defining geofencing zones using tracking tags, signal reception anchors, and a central processing system.
Click to expand...

Researchers at Nozomi Networks revealed the previously undocumented security flaws during Black Hat 2022, while the full technical details were published in a white paper yesterday.
Click to expand...

Nozomi suggests that admins of RTLS systems should use firewalls to restrict access, add intrusion detection systems in the network, and use SSH tunneling with packet synchronization counter-values for data encryption.
Click to expand...

Nozomi Networks: Nozomi Networks Researchers Reveal Zero-Day RTLS Vulnerabilities at Black Hat 22

During the presentation, the team demonstrated how a threat actors could launch a Man-in-the-Middle (MitM) attack and tamper with location data to place a worker outside of a geo-fencing area so that dangerous machinery would restart while a worker is nearby. A threat actor could also tamper with location data to show that a worker is within a designated geofencing zone to shut down an entire production line, even when no one is around.

They also demonstrated how threat actors could tamper with RTLS used for COVID-19 contact tracing to falsify personnel coming into contact with COVID-positive personnel.
Click to expand...

Log in or Sign up

RTLS systems vulnerable to MiTM attacks, location manipulation

guest Guest

Log in or Sign up

RTLS systems vulnerable to MiTM attacks, location manipulation

guest Guest

Useful Searches