Browsing the "firmware" Tag

Hackable firmware lurks inside Dell, HP and Lenovo computers amid supply chain security efforts

February 20th, 2020 📆 | 3707 Views ⚑

Written by Sean Lyngaas

Tagged with: computers • firmware • hackable • inside • lenovo • lurks • supply

Unsigned Firmware Puts Windows, Linux Peripherals at Risk

February 19th, 2020 📆 | 5783 Views ⚑

Researchers at firmware security company Eclypsium on Tuesday released new research that identifies and confirms unsigned firmware in WiFi adapters,

Tagged with: firmware • linux • peripherals • unsigned • windows

What do a Lenovo touch pad, an HP camera and Dell Wi-Fi have in common? They’ll swallow any old firmware, legit or saddled with malware

February 19th, 2020 📆 | 4114 Views ⚑

Some of the biggest names in the technology world still ship hardware that can be possibly hijacked by well-placed miscreants,

Tagged with: camera • common • Dell • firmware • legit • lenovo • malware • pad • saddled • swallow • Theyll • touch • Wifi

What does a Lenovo touch pad, an HP camera and Dell Wi-Fi have in common? They’ll swallow any old firmware, legit or saddled with malware

February 19th, 2020 📆 | 6022 Views ⚑

Some of the biggest names in the technology world still ship hardware that can be possibly hijacked by well-placed miscreants,

Tagged with: camera • common • firmware • legit • lenovo • swallow • touch

Lack of firmware validation for computer peripherals enables highly persistent attacks

February 18th, 2020 📆 | 2668 Views ⚑

Tagged with: computer • enables • firmware • highly • peripherals • persistent • validation

Five years after the Equation Group HDD hacks, firmware security still sucks

February 18th, 2020 📆 | 4653 Views ⚑

See also Latest computer news at CNET In a report published today, Eclypsium, a cyber-security firm specialized in firmware security,

Tagged with: after • equation • firmware • group • hacks • security • years

Five years after the Equation Group HDD hacks, firmware security still sucks

February 18th, 2020 📆 | 6874 Views ⚑

See also Latest computer news at CNET In a report published today, Eclypsium, a cyber-security firm specialized in firmware security,

Tagged with: after • equation • firmware • group • hacks • security • years

[remote] HiSilicon DVR/NVR hi3520d firmware – Remote Backdoor Account

February 5th, 2020 📆 | 2165 Views ⚑

Tagged with: account • backdoor • DVRNVR • firmware • hardware • hi3520d • hisilicon • remote

WRT54g Linux Firmware Distributions

February 4th, 2020 📆 | 6578 Views ⚑

HYPERWRT Mission Statement is “HyperWRT is a power boost firmware for the Linksys WRT54G and WRT54GS router. The goal of

Tagged with: android • apple • bug bounty • bug bounty hunting • bug bounty program • computer forensics • computer research • Computer security • computer security news • computer security principles and practice • computer security software • computers research • cryptography • cyber • Cyber security summit • cyberattack • cybersecurity news • data breach • distributions • exploit-db • firmware • healthcare • internet • ios • kali linux • linux • malware • network security • offensive security • os • payload computers • pentester • pentesterlab • pentesting tools • pentesting tutorials • privacy • privacy security and ethics • security assessments • security distro • sql injection • sql injection attack • sql injection cheat sheet • technology • virus • vulnerabilities • vulnerabilty • window • wrt54g • XSS • XSS Attack • xss cheat sheet • xss payloads • xss protection • xss steal cookie

Google open-sources the firmware needed to build hardware security keys

February 1st, 2020 📆 | 4654 Views ⚑

Google has open-sourced today a new project called OpenSK that will make it easier for hobbyists and hardware vendors to

Tagged with: build • firmware • google • hardware • needed • security • sources

Google open-sources the firmware needed to build hardware security keys

January 30th, 2020 📆 | 6216 Views ⚑

Google has open-sourced today a new project called OpenSK that will make it easier for hobbyists and hardware vendors to

Tagged with: build • firmware • google • hardware • keys • needed • opensources • security • sources

Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges

January 30th, 2020 📆 | 8214 Views ⚑

Tagged with: access • attacker • bios update • Bugs • CVE-2019-18579 • Dell • direct memory access • dma • eclypsium • firmware • hacks • hp • kernel • kernel privileges • malware • memory • MemoryAccess • Mobile Security • Open • Path • privacy • privileges • vulnerabilities • Web Security

TP-LINK TL-WR849N 0.9.1 Firmware cgi/softup POST Request privilege escalation

January 28th, 2020 📆 | 7402 Views ⚑

Tagged with: escalation • firmware • privilege • request • softup • wr849n

Leave your admin interface’s TLS cert and private key in your router firmware in 2020? Just Netgear things • The Register

January 21st, 2020 📆 | 2492 Views ⚑

Netgear left in its router firmware key ingredients needed to intercept and tamper with secure connections to its equipment’s web-based

Tagged with: admin • firmware • interface • leave • netgear • private • router

Leaving your admin interface’s TLS cert and private key in your router firmware in 2020? Just Netgear things • DigitalMunition

January 21st, 2020 📆 | 6369 Views ⚑

Netgear left in its router firmware key ingredients needed to intercept and tamper with secure connections to its equipment's web-based

Tagged with: admin • firmware • interface • leaving • netgear • private • router

Intelbras WRN240 Firmware incoming/Firmware.cfg POST Request privilege escalation

January 18th, 2020 📆 | 5966 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: firmware • incoming • intelbras • privilege • request • wrn240

DTEN D5/D7 up to 1.3.3 Firmware privilege escalation

January 8th, 2020 📆 | 8324 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.3 $0-$5k 2.84- A vulnerability, which was classified as

Tagged with: escalation • firmware • privilege

Serious Vulnerabilities Impacted Ruckus Wireless Router Firmware

January 4th, 2020 📆 | 4339 Views ⚑

Heads up Ruckus routers users! A researcher has discovered numerous vulnerabilities in Ruckus router firmware. Exploiting the bugs could allow

Tagged with: firmware • impacted • router • ruckus • serious • vulnerabilities • wireless

36C3 – Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale – Russian (русский) t

December 29th, 2019 📆 | 5243 Views ⚑

https://media.ccc.de/v/36c3-10891-identifying_multi-binary_vulnerabilities_in_embedded_firmware_at_scale Low-power, single-purpose embedded devices (e.g., routers and IoT devices) have become ubiquitous. While they automate and simplify many aspects

Tagged with: binary • embedded • firmware • identifying • multi • scale • vulnerabilities

36C3 – Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

December 29th, 2019 📆 | 4410 Views ⚑

https://media.ccc.de/v/36c3-10891-identifying_multi-binary_vulnerabilities_in_embedded_firmware_at_scale Low-power, single-purpose embedded devices (e.g., routers and IoT devices) have become ubiquitous. While they automate and simplify many aspects

Tagged with: binary • embedded • firmware • identifying • multi • scale • vulnerabilities

Research Team Demonstrates Hard Wallets Vulnerabilities, Trezor Promises Firmware Update

December 28th, 2019 📆 | 6733 Views ⚑

Researchers have reportedly shown how they were able to hack the Trezor One, Ledger Nano S and Ledger Blue at

Tagged with: demonstrates • firmware • promises • research • trezor • vulnerabilities • wallets

Intel CSME up to 12.0.44/13.0.9/14.0.9 Firmware Update privilege escalation

December 19th, 2019 📆 | 3905 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • firmware • intel • privilege • update

Intel NUC Firmware Validation privilege escalation [CVE-2019-14609]

December 18th, 2019 📆 | 4616 Views ⚑

A vulnerability was found in Intel NUC (unknown version) and classified as critical. This issue affects an unknown function of

Tagged with: 14609 • escalation • firmware • intel • privilege • validation

Intel NUC Firmware Integer Overflow memory corruption

December 18th, 2019 📆 | 3142 Views ⚑

A vulnerability was found in Intel NUC (affected version unknown). It has been declared as problematic. Affected by this vulnerability

Tagged with: corruption • firmware • integer • intel • memory • overflow