Visitor Kiosk Access Systems Riddled with Bugs

guest · Mar 4, 2019

Visitor Kiosk Access Systems Riddled with Bugs
March 4, 2019
https://threatpost.com/visitor-kiosk-bugs/142433/

Visitor-management systems protect business against physical threats such as unwanted and unidentified guests. But many of these lobby-based perimeter checkpoints are opening up companies to a bevy of cyber-threats.
“These are really interesting targets. By their very nature, they are exposed to the public that has no credentials,” said Daniel Crowley, IBM X-Force Red’s research director.

Crowley said researchers had three goals in testing the visitor-management systems. “One, was how easy is to get checked-in as a visitor without any sort of real identifying information. Secondly, we set out to see how easy is it to get other people’s information out of the system.
And third [...] cause it to crash or get arbitrary code-execution to run on the targeted device

Researchers said they were able to accomplish all three.
Click to expand...

guest · Mar 19, 2019

High-tech check-ins are fast and efficient — but who can access your information?
March 18, 2019
https://www.nbcnews.com/business/bu...ho-can-access-n984556?cid=public-rss_20190318

Automated visitor security is a relatively new technology that’s expected to become more widely adopted in the next few years.

“Obviously, identity theft is a major concern, but there's also a lot of information that can be gleaned just by understanding the meetings that are going on at a company,” Henderson told NBC News. For example, knowing that a management team from a related company has visited recently could signal future merger and acquisition activities.

“An attacker always looks for the weakest link, so if they find one of these systems that collects personal data and is network-connected, it’s like a goldmine for them,” Sekar said. “If these systems are not secured and a company does not have the right security practices in place, then that’s a big security risk.”
“Don’t be confused. A visitor management system is still a computer, and it still has the same vulnerabilities,” IBM’s Henderson said.
Click to expand...

Log in or Sign up

Visitor Kiosk Access Systems Riddled with Bugs

guest Guest

guest Guest

Log in or Sign up

Visitor Kiosk Access Systems Riddled with Bugs

guest Guest

guest Guest

Useful Searches