URGENT/11 VxWorks RTOS Vulnerabilities Found, Critical Systems Affected

stapp · Jul 29, 2019

Almost a dozen serious vulnerabilities have been sitting for the past 13 years in the VxWorks real-time operating system (RTOS) used to power mission-critical embedded devices.
Click to expand...

According to Wind River, more than two billion embedded systems rely on its RTOS that is trusted by top-tier organizations from various industry segments: defense, security, aerospace, robotics, engineering, industrial automation, and even solar system exploration (NASA Jet Propulsion Laboratory).
Click to expand...

https://www.bleepingcomputer.com/ne...nerabilities-found-critical-systems-affected/

guest · Aug 5, 2019

Industrial Giants Respond to 'Urgent/11' Vulnerabilities
August 5, 2019
https://www.securityweek.com/industrial-giants-respond-urgent11-vulnerabilities

Several major industrial and automation solutions providers have issued advisories in response to the recently disclosed Wind River VxWorks vulnerabilities dubbed Urgent/11.
Click to expand...

guest · Aug 23, 2019

Claroty Releases Free Diagnostic Tool for Urgent/11 Vulnerabilities
August 23, 2019
https://www.securityweek.com/claroty-releases-free-diagnostic-tool-urgent11-vulnerabilities

IoT security firm Armis recently disclosed 11 vulnerabilities affecting the VxWorks real time operating system (RTOS). The flaws, collectively tracked as Urgent/11, can allow a remote attacker to take control of impacted systems.

Claroty said it could not find any freely available tool that organizations can use to check if they are vulnerable to Urgent/11 attacks so it decided to release a free and open source diagnostic tool. The tool is designed to look for CVE-2019-12258, one of the Urgent/11 vulnerabilities that can be exploited for DoS attacks.

“This tool allows network owners to scan their network and identify compromised and vulnerable devices, thus garnering insight into the extent of their exposure to Urgent11. This free tool, used in addition to the vendor advisories, should provide a degree of added security for asset owners and provide much-needed transparency into their network systems.”
The free tool, available as a Python script, can be downloaded from GitHub.
Click to expand...

guest · Sep 6, 2019

URGENT/11 – New ICS Threat Signatures by Nozomi Networks Labs
September 5, 2019
https://www.nozominetworks.com/blog/urgent-11-new-ics-threat-signatures-by-nozomi-networks-labs/

First reported and analyzed by Armis, and further described by VxWorks incident response, the vulnerabilities are particularly notable because they allow attackers to take over devices without user interaction.

While Armis is to be commended for releasing four publicly available threat signatures for URGENT/11, the signatures can result in many false positives when used in industrial networks that contain legacy devices. To help our customers avoid this problem, Nozomi Networks Labs didn’t immediately incorporate the signatures into our OT ThreadFeed (OTTF).
URGENT/ 11 – New ICS Threat Signatures from Nozomi Networks Labs
Those involved in the safety, security and reliability of industrial operations should evaluate their network for exposure to risk from URGENT/11. An attack that exploits one of its vulnerabilities could allow threat actors to take over devices without user interaction. The attack could spread very quickly, and it could cause significant operational disruption.
Nozomi Networks customers using Guardian with OT ThreatFeed automatically receive our threat signatures.
Click to expand...

guest · Oct 2, 2019

Urgent11 flaws affect more medical, industrial devices than previously thought
October 2, 2019
https://www.helpnetsecurity.com/2019/10/02/urgent11-rtos-vulnerabilities/

When, in late July, Armis researchers revealed the existence of the so-called Urgent11 vulnerabilities in Wind River’s VxWorks real-time operating system, they noted that RTOS offerings by other vendors may also be vulnerable.
Additional discoveries
The discovery of the same vulnerabilities in other RTOS has been triggered by a hospital that uses the Armis security platform: they found that the BD Alaris PC Unit infusion pumps they were using had them, despite not running Wind River’s VxWorks RTOS.

The list of affected devices is sizeable and diverse (SCADA devices, patient monitors, firewalls, printers, etc.).
It includes devices by Avaya, Schneider Electric, Siemens, Sonicwall, Xerox, ABB, Dräger, GE Healthcare, Honeywell, Alcatel-Lucent, and others. Armis has linked to these manufacturers’ security advisories in their blog post.
Click to expand...

guest · May 14, 2020

Siemens Says Power Meters Affected by Urgent/11 Vulnerabilities
May 13, 2020
https://www.securityweek.com/siemens-says-power-meters-affected-urgent11-vulnerabilities

According to Siemens, its Power Meter 9410 and 9810 series products are affected by ten of the eleven Urgent/11 flaws. The German industrial giant says 9410 series devices are only affected if they run a firmware version prior to 2.1.1, which patches the vulnerabilities.
In the case of 9810 devices, a patch has yet to be released and Siemens recommends some workarounds and mitigations until a firmware update becomes available.

“The [vulnerabilities] could allow an attacker to execute a variety of exploits for the purpose of Denial-of-Service (DoS), data extraction, RCE, etc. targeting both availability and confidentiality of the devices and data,” Siemens said in its advisory.
Schneider Electric also updated its initial advisory on the Urgent/11 flaws on Tuesday to inform customers about more patches for affected products. The company has been gradually releasing patches since the disclosure of the vulnerabilities in July 2019.
Click to expand...

Log in or Sign up

URGENT/11 VxWorks RTOS Vulnerabilities Found, Critical Systems Affected

stapp Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

URGENT/11 VxWorks RTOS Vulnerabilities Found, Critical Systems Affected

stapp Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches