IoT devices at risk from Amnesia:33

Share on facebook
Share on google
Share on twitter
Share on linkedin
Time to Read: 1 minute

A new series of vulnerabilities dubbed Amnesia:33 puts millions of IoT devices at risk of being compromised.

Security researchers from Forescout disclosed the 33 vulnerabilities today. The flaws are found in four open-source TCP/IP libraries used in the firmware of products from over 150 vendors.

According to the researchers’ estimates, millions of consumer and enterprise IoT devices are at risk from Amnesia:33 vulnerabilities.

The affected libraries are uIP, FNET, picoTCP, and Nut/Net. Manufacturers have used these libraries for decades to add TCP/IP support to their products.

Here are the number of vulnerabilities discovered in each library:

  • uIP – 13
  • picoTCP – 10
  • FNET – 5
  • Nut/Nut – 5

uIP, the most vulnerable library, was also found to be used in the highest number of vendors.

Forescout also analysed the following libraries but did not find any vulnerabilities: lwIP, CycloneTCP, and uC/TCP-IP. 

Due to the prevalence of these libraries, just about every type of connected hardware is impacted by Amnesia:33—from SoCs to smart plugs, from IP cameras to servers.

Unlike the previously disclosed Ripple20 vulnerabilities, Amnesia:33 primarily affects the DNS, TCP, and IPv4/IPv6 sub-stacks.

Ripple20 and Amnesia:33 vulnerabilities both predominately consist of Out-of-Bounds Read, followed by Integer Overflow.

IoT devices (46%) represent the highest number of affected device types, according to Forescout’s research. This is followed by OT/BAS and OT/ICS at 19 percent, and then IT at 16 percent.

RSS Latest Technology News

  • Spacefarer Ariana Grande outfit now available in Fortnite October 22, 2021
    Fortnite's collaboration with pop star Ariana Grande continues with yet another outfit inspired by her being added to the game today. Available in the Fortnite store today is Spacefarer Ariana Grande, a distinctly different skin to the Ariana Grande ...
    Ryan Galloway
  • Twitter is finally letting everyone create Spaces October 21, 2021
    The Spaces team sent out a tweet to announce the change, noting that users on both Android and iOS will now be able to host Spaces. It also offers a GIF that briefly refreshes users on how to host a Space, in case you've forgotten after all these months.
    Emma Roth
  • Microsoft fixes Windows 11 AMD CPU performance issues with new update October 21, 2021
    This new Windows 11 update also includes a large amount of fixes, including one to solve an issue that prevents the Start menu from opening after your OS upgrade, and fixes to input delays for certain Bluetooth mice and keyboards. You can find the full ...
    Tom Warren

SUBSCRIBE FOR XTECHALPHA NEWS AND RECEIVE WEEKLY UPDATES

Follow Us

IoT devices at risk from Amnesia:33

by kajalmishra@3ai.in Time to Read: 1 min
0
AI Tool to Reshape Treatment by Predicting Cell Behaviors
Get to know the latest updates on exponential technologies, new age industry segments with our weekly XTechalpha Xclusive newsletter straight in your mailbox.