Microhard Systems 3G/4G Cellular Ethernet And Serial Gateway Denial Of Service
Posted by deepcore on July 17, 2018 – 11:35 pm
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway systems have an undocumented and hidden feature that allows an authenticated attacker to list running processes in the operating system and send arbitrary signals to kill any process running in the background including starting and stopping system services. This impacts availability and can be triggered also by CSRF attacks that requires device restart and/or factory reset to rollback malicious changes. Many versions are affected.
Post a reply
You must be logged in to post a comment.