India's largest platform and marketplace for AI & Analytics leaders & professionals

Sign in

India's largest platform and marketplace for AI & Analytics leaders & professionals

3AI Digital Library

IoT devices at risk from Amnesia:33

3AI December 17, 2020

 

A new series of vulnerabilities dubbed Amnesia:33 puts millions of IoT devices at risk of being compromised.

Security researchers from Forescout disclosed the 33 vulnerabilities today. The flaws are found in four open-source TCP/IP libraries used in the firmware of products from over 150 vendors.

According to the researchers’ estimates, millions of consumer and enterprise IoT devices are at risk from Amnesia:33 vulnerabilities.

The affected libraries are uIP, FNET, picoTCP, and Nut/Net. Manufacturers have used these libraries for decades to add TCP/IP support to their products.

Here are the number of vulnerabilities discovered in each library:

  • uIP – 13
  • picoTCP – 10
  • FNET – 5
  • Nut/Nut – 5

uIP, the most vulnerable library, was also found to be used in the highest number of vendors.

Forescout also analysed the following libraries but did not find any vulnerabilities: lwIP, CycloneTCP, and uC/TCP-IP. 

Due to the prevalence of these libraries, just about every type of connected hardware is impacted by Amnesia:33—from SoCs to smart plugs, from IP cameras to servers.

Unlike the previously disclosed Ripple20 vulnerabilities, Amnesia:33 primarily affects the DNS, TCP, and IPv4/IPv6 sub-stacks.

Ripple20 and Amnesia:33 vulnerabilities both predominately consist of Out-of-Bounds Read, followed by Integer Overflow.

IoT devices (46%) represent the highest number of affected device types, according to Forescout’s research. This is followed by OT/BAS and OT/ICS at 19 percent, and then IT at 16 percent.

    3AI Trending Articles

  • Unleashing Agentic AI: Maximizing ROI with Autonomous Data Solutions

    Featured Article Author: Saurabh Kaushik, IBM In recent years, AI has fundamentally transformed businesses by enhancing customer engagement, streamlining processes, and improving decision-making. Now, a new phase of AI, known as Agentic AI, is emerging, which enables autonomous decision-making and action-taking capabilities. For business leaders and AI enthusiasts, this shift introduces exciting opportunities for innovation […]

  • Transformation of Talent Acquisition by Algorithms

    Business leaders have long recognized that the ability to hire the right talent plays a significant role in any organization’s performance. Views about the challenges to acquiring and retaining such talent have evolved over time. We have moved on from a focus on the notion that a talent shortage is creating a “war for talent,” an […]

  • A Paradigm Shift in Management Education Powered by Large Language Models

    Featured Article: Author:  Dr. Tuhin Chattopadhyay, Professor, Jagdish Sheth School of Management, Bengaluru, India, Founder & CEO, Tuhin AI Advisory, Abstract. The paper explores the potential of large language models in transforming management education. The paper first introduces the concept of large language models and explains how they work. Subsequently, the paper explores the different […]

  • TransUnion Expands Global Capability Centers in India and South Africa

    Centers in India and South Africa to support global organization and local markets CHICAGO, Feb. 22, 2021 (GLOBE NEWSWIRE) — As TransUnion (NYSE: TRU) continues to evolve and modernize its approach to business, the company announced expansion of its existing Global Capability Center in Chennai to Pune, India and establishment of a new Global Capability […]