India's largest platform and marketplace for GCC & AI leaders and professionals

Sign in

India's largest platform and marketplace for GCC & AI leaders and professionals
Become a Thought Leader
Become a 3AI Member

Sign in

3AI Digital Library

< Go Back

IoT devices at risk from Amnesia:33

3AI December 17, 2020

 

A new series of vulnerabilities dubbed Amnesia:33 puts millions of IoT devices at risk of being compromised.

Security researchers from Forescout disclosed the 33 vulnerabilities today. The flaws are found in four open-source TCP/IP libraries used in the firmware of products from over 150 vendors.

According to the researchers’ estimates, millions of consumer and enterprise IoT devices are at risk from Amnesia:33 vulnerabilities.

The affected libraries are uIP, FNET, picoTCP, and Nut/Net. Manufacturers have used these libraries for decades to add TCP/IP support to their products.

Here are the number of vulnerabilities discovered in each library:

  • uIP – 13
  • picoTCP – 10
  • FNET – 5
  • Nut/Nut – 5

uIP, the most vulnerable library, was also found to be used in the highest number of vendors.

Forescout also analysed the following libraries but did not find any vulnerabilities: lwIP, CycloneTCP, and uC/TCP-IP. 

Due to the prevalence of these libraries, just about every type of connected hardware is impacted by Amnesia:33—from SoCs to smart plugs, from IP cameras to servers.

Unlike the previously disclosed Ripple20 vulnerabilities, Amnesia:33 primarily affects the DNS, TCP, and IPv4/IPv6 sub-stacks.

Ripple20 and Amnesia:33 vulnerabilities both predominately consist of Out-of-Bounds Read, followed by Integer Overflow.

IoT devices (46%) represent the highest number of affected device types, according to Forescout’s research. This is followed by OT/BAS and OT/ICS at 19 percent, and then IT at 16 percent.

    3AI Trending Articles

  • Towards a Responsible Future – Decoding the Importance of Ethics in AI

    Featured Article by Anusha Thakur The conjunction of the obtainability of vast amounts of stretch, speed, and big data for the development of machine learning algorithms and cloud computing platforms has led to a varied range of innovations in Artificial Intelligence (AI). In an era defined by state-of-the-art technologies, the role of AI systems, and […]

  • Impact of C19 on upskilling and Edtech

    After nearly one year under lockdown, here is how the coronavirus pandemic has impacted the upskilling and edtech platforms across the country. . Overnight in March 2020, COVID19 forced employees and companies to change the way they worked and lived. Regardless of job role, this situation transformed the way every working professional went about their […]

  • How AI is supercharging Metaverse

    Featured Article: Author: Dr. Anish Agarwal, Global Head of Analytics, Dr. Reddy’s Laboratories The Metaverse is one of the most significant rising technologies right now. Some will say you have to travel in time to know about it. But the metaverse has given a huge platform to people to hypothetically get into the imaginary world. […]

  • Sebi is setting up a Cybersecurity Fusion Centre

    Establishing a cybersecurity fusion centre or a cyber lab is part of Sebi’s three-tier structure for monitoring cybersecurity-related events in the securities markets. . NEW DELHI: Markets regulator Sebi is in the process of setting up a cybersecurity fusion centre, a move aimed at detecting cyber threats faster and resolve such incidents efficiently and effectively. […]