Hunting Vulnerable OEM IoT Devices at Scale
[Pages:40]OEM Finder
Hunting Vulnerable OEM IoT Devices at Scale
Asuka Nakajima
NTT Secure Platform Laboratories
# whoami
Asuka Nakajima
@AsuNa_jp
Security Researcher @ NTT
o Vulnerability Discovery, Reverse Engineering, and IoT Security
? Speaker: BlackHatUSA 2019, AsiaCCS 2019, ROOTCON 2019, PHDays 2016
Black Hat Asia Review Board
o From 2018 ? 2020
Founder of CTF for GIRLS
o First Female InfoSec Community in Japan
? Est. 2014.06
Background [1/4]
Many Consumer IoT Vendors Employ an OEM (Original Equipment Manufacture) Production Model
OEM Supply Chain (a.k.a White Label Model)
OEM Supplier (Brand A)
IoT Vendors
Network Camera
Vendor B OEM
[ Brand B ]
B
A
Original Device
Vendor C OEM
[ Brand C ]
C
Vendor D OEM
[ Brand D ]
D
Users
B C
Background [2/4]
While OEM Production Model Can Reduce the Device Manufacturing Costs, It Could Lead to a High-Security Risk
OEM Supplier (Brand A)
Network Camera
A
Original Device
IoT Vendors
Vendor B OEM
[ Brand B ]
B
Vendor C OEM
[ Brand C ]
C
Vendor D OEM
[ Brand D ]
D
Background [2/4]
While OEM Production Model Can Reduce the Device Manufacturing Costs, It Could Lead to a High-Security Risk
OEM Supplier (Brand A)
Network Camera
Vulnerable
A
Original Device
IoT Vendors
Vendor B OEM
[ Brand B ]
B
Vendor C OEM
[ Brand C ]
C
Vendor D OEM
[ Brand D ]
D
Background [2/4]
While OEM Production Model Can Reduce the Device Manufacturing Costs, It Could Lead to a High-Security Risk
OEM Supplier (Brand A)
Network Camera
Vulnerable
A
Original Device
IoT Vendors
Vendor B OEM
[ Brand B ]
B
Vendor C OEM
[ Brand C ]
C
Vendor D OEM
[ Brand D ]
D
Vulnerable Vulnerable Vulnerable
Background [3/4]
2017
CVE-2017-7921
Vulnerability found in the Hikvision's (OEM Supplier's) network camera was propagated to its various OEM devices
which are sold by over 80 vendors[1]
[1] 80+ OEMs Verified Vulnerable To Hikvision Backdoor, IPVM, Sep 22, 2017,
Background [4/4]
e.g.) NVD, CVE
Vulnerability Databases Do NOT Include and Announce Vulnerable OEM Devices as One of the Affected Products
Preliminary Survey
Investigated CVEs which are related to IoT Devices from 2002 mid 2018 by using NVD data feeds[2].
1. Searched CVE which include "firmware" or "camera" or nearly "router" or "modem" or router's name listed in [3] in the 2000 CVEs affected product/software name
2. Filtered out the CVEs which affects only one vendor, and then manually investigated all the CVEs
Only 6 CVEs list the OEM devices
as one of the affected products
[2] NVD Data Feeds, [3] Router Check Support,
CVE-ID
CVE-2010-4230 CVE-2010-4231 CVE-2010-4232 CVE-2010-4233 CVE-2010-4234
CVE-2017-3216
Affected Vendors
OEM Supplier Vendor which sells the
OEM Product
Camtron Tecvoz
Zyxel
Huawei, Zteo, Mada,
Greenpacket,
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- selling on amazon guide to xml
- archived big data analytics options on aws
- overview of amazon web services aws whitepaper
- cs 229 final project report 15 december 2017 1 i spot a
- securely access services over aws privatelink
- 5 keys to effective innovation and new product development
- big techs in finance regulatory approaches and policy options
- amazon forecast developer guide
- setting up items with full item spec bulk upload
- amazon location service developer guide
Related searches
- ford oem parts online
- ford f 150 oem parts
- ford f150 oem parts catalog
- dodge oem parts lookup
- buy oem ford parts online
- discontinued ford oem parts online
- ford oem parts online catalog
- ford oem parts store
- discount oem ford parts online
- ford oem body parts
- chrysler oem part numbers
- oem ford parts and accessories