India's largest platform and marketplace for GCC & AI leaders and professionals

Sign in

India's largest platform and marketplace for GCC & AI leaders and professionals
Become a Thought Leader
Become a 3AI Member

Sign in

3AI Digital Library

< Go Back

IoT devices at risk from Amnesia:33

3AI December 11, 2020

A new series of vulnerabilities dubbed Amnesia:33 puts millions of IoT devices at risk of being compromised.

Security researchers from Forescout disclosed the 33 vulnerabilities today. The flaws are found in four open-source TCP/IP libraries used in the firmware of products from over 150 vendors.

According to the researchers’ estimates, millions of consumer and enterprise IoT devices are at risk from Amnesia:33 vulnerabilities.

The affected libraries are uIP, FNET, picoTCP, and Nut/Net. Manufacturers have used these libraries for decades to add TCP/IP support to their products.

Here are the number of vulnerabilities discovered in each library:

  • uIP – 13
  • picoTCP – 10
  • FNET – 5
  • Nut/Nut – 5

uIP, the most vulnerable library, was also found to be used in the highest number of vendors.

Forescout also analysed the following libraries but did not find any vulnerabilities: lwIP, CycloneTCP, and uC/TCP-IP. 

Due to the prevalence of these libraries, just about every type of connected hardware is impacted by Amnesia:33—from SoCs to smart plugs, from IP cameras to servers.

Unlike the previously disclosed Ripple20 vulnerabilities, Amnesia:33 primarily affects the DNS, TCP, and IPv4/IPv6 sub-stacks.

Ripple20 and Amnesia:33 vulnerabilities both predominately consist of Out-of-Bounds Read, followed by Integer Overflow.

IoT devices (46%) represent the highest number of affected device types, according to Forescout’s research. This is followed by OT/BAS and OT/ICS at 19 percent, and then IT at 16 percent.

(Disclaimer: The opinions expressed in this column are that of the writer. The facts and opinions expressed here do not reflect the views of www.xtechalpha.com.)

    3AI Trending Articles

  • Unlocking Synergy: Combining Computer Vision, NLP, and Deep Learning for Automated Process Discovery & Process Intelligence

    Featured Article: Author: Anurag Upadhyay, Accenture Introduction: In today’s dynamic business landscape, organizations face an ever-increasing demand for efficiency, innovation, and competitiveness. To meet these challenges head-on, businesses are turning to cutting-edge technologies that can revolutionize how they understand, optimize, and manage their operations. Among these transformative technologies, the fusion of Computer Vision, Natural Language […]

  • Blockchain Powered Smartphones by Fesschain

    Firm has tied up with a private manufacturer that can produce 10,000 pieces a day. But Fesschain is now scouting for a suitable location in Noida to set up its own production unit Homegrown blockchain technology company Fesschain is targetting almost 10 shipments of its smartphones in the next 6-12 months. The company, which has recently entered mobile handset […]

  • Rethinking Reasoning in AI with Multimodal Chain-of-Thought Prompting

    Featured Article by Rahul Pandey, Data Science & Applied AI Practice Leader, C5i Beyond Understanding to Reasoning As AI systems evolve, the true benchmark is no longer their ability to comprehend it, it’s their ability to reason. Today, we stand at the edge of a significant breakthrough: Multimodal Chain-of-Thought Prompting (MCoT), a technique that allows […]

  • Algorithms to take Digital Businesses to Next Level

    Digital transformation is vital for business growth, but working out what to do and how to do it remains difficult for IT and business leaders.  At its heart, the digital revolution is about consumer behavior and business opportunity, not technology. The major changes in how consumers use technology, and to where technology is applied, represent […]