• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Technologous - Managed IT Solutions Bryan/College Station

  • Home
  • About
    • Areas We Serve
    • Our Leadership
      • Chris Dawson
      • Ian Soares
  • IT Services
    • Managed IT
    • Support IT
    • Cloud IT
  • Blog
  • Request a Consultation
  • Contact
You are here: Home / Blog / Security Issue Found In Multiple Devices Is Called ‘Urgent 11’

Security Issue Found In Multiple Devices Is Called ‘Urgent 11’

Let’s take a little time to talk about the vast numbers of smart devices in use around the world. You probably have several in your home or office. Smart devices need operating systems, just like your phone and your PC. Of course, mobile device operating systems must be much smaller and more compact. After all, they don’t really need to do a lot of computing, and they don’t need a GUI, so the code tends to be on the lean side.

The odds are excellent that you’ve never even heard of most of the IoT’s operating systems, nor the companies that make them. Take VxWorks by a company called Wind River, for example. It’s the most popular Real-Time Operating System (RTOS), used in a wide range of smart devices today. They don’t get a lot of attention or oversight because almost nobody has heard of them.

That’s beginning to change, however. Recently, security researchers disclosed the details of the “Urgent 11”, which are 11 vulnerabilities found in VxWorks that can be used by hackers to take control of a variety of devices. These devices range from medical systems to printers, industrial equipment, routers, and more.

The company has been in existence for 32 years. Yet, in that time, only 13 security flaws with a MITRE-assigned CVE have been found in the VxWorks RTOS, because again, nobody’s paying attention.
The good news is that when someone finally started paying attention, Wind River responded quickly and resolved all eleven of the security flaws, issuing a patch to correct them. There’s just one rather significant catch, however.

The company is claiming that the vulnerabilities are not unique to Wind River software and that the IPnet stack (where the vulnerabilities were found) was acquired by the company back in 2006. Prior to Wind River’s acquisition of it, it was deployed in a wide range of other RTOS’.
All that to say, while Wind River is acting responsibly, there is an unknown number of other RTOS’ out there that are vulnerable. The companies behind them may be doing little or nothing about it. In many ways, the OS ecosystem of the IoT is still very much a black box, and that’s troublesome.

August 14, 2019 Filed Under: Blog Tagged With: RTOS, Urgent 11, VxWorks

Primary Sidebar

GET OUR BLOG IN YOUR EMAIL!

Archives

  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • February 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • August 2018

Tags

adobe android App Apple attack Attacks Breach Browser Chrome Dark Web Data Database Data Breach Email Facebook Firefox gmail Google Google Chrome government hacker Hackers information Intel iOS iPhone malware Microsoft Microsoft edge Microsoft Windows 10 office 365 pandemic Password Passwords patch Phishing Phishing emails ransomeware Ransomware security Update Vulnerability Wifi Windows Windows 10

Footer

Contact Us

Address: 3091 University Drive, Unit 210, Bryan, Texas 77802
Phone: 979-217-1226

Our Blog

  • Apple Updates Fix Security Flaws on Most Devices March 19, 2021
  • Sendgrid Uses Zoom Invites to Steal Credentials March 18, 2021
  • Browser Wars Heat Up With Microsoft Edge Boosting Speeds March 18, 2021
  • Microsoft’s Exchange Prevents Phishing And Ransomware March 17, 2021
  • Ransomware Attackers Demand 20 Million From U.S. Kia Motors March 12, 2021

Search

Follow Us

  • Facebook
  • Home
  • About
  • Resources
  • Contact
  • Our Leadership
  • Why Choose Us?
  • IT Services
  • Request a Consultation

Copyright © 2021| All Rights Reserved | Powered By Technologous, LLC | Log in